Funny to read this after seeing Fly.io’s recent blog about VS Code’s remote SSH agent: https://fly.io/blog/vscode-ssh-wtf/
I’m surprised this hasn’t come up more frequently. I’d expect a lot of security products to flag it as very much looking like malware.