CyberSecurityBoardThreat Intel · CVEs · Products
Attack Groups

TaskJacker: Malicious VS Code Task File Cluster in PolinRider Campaign

July 4, 2026

A cluster within the PolinRider campaign that drops malicious VS Code task files into GitHub users' repositories. The tasks use 'runOn: folderOpen' to execute arbitrary code when the folder is opened in VS Code or Cursor.