EIP-2026-103783

This is a technical writeup describing a code execution vulnerability in the VSCode Python extension, where VSCode may use code from a virtualenv in project folders without user consent, leading to arbitrary code execution. The PoC involves cloning a malicious repository and opening it in VSCode.