CVE-2021-26700

This repository contains a functional proof-of-concept exploit for CVE-2021-26700, demonstrating remote code execution in the VSCode NPM extension by manipulating the `npm.bin` setting in `.vscode/settings.json` to execute arbitrary scripts when viewing a `package.json` file.

This repository contains a functional proof-of-concept exploit for CVE-2021-26700, demonstrating remote code execution in the VSCode extension 'eg2.vscode-npm-script' by manipulating the 'npm.bin' setting in a malicious '.vscode/settings.json' file.

This repository contains a functional exploit for CVE-2021-26700, a remote code execution vulnerability in the npm extension for Visual Studio Code. The exploit leverages a malicious script hidden in a GitHub repository that executes when a victim opens a crafted package.json file in VS Code with the vulnerable extension installed.