@mcc the folder could have been downloaded from the internet and contain a malicious .vscode folder, which contain all the settings for that folder so its content is run by vscode