He deleted the folder. Installed official VS Code via a friend’s hotspot. Ran a full antivirus scan. Nothing found. No miner. No keylogger. Just… luck.
He double-clicked.
But six months later, while cleaning his downloads folder, Raj saw the VSCode_Kuyhaa folder again. He hadn’t updated it since. Security patches? Zero. Extension marketplace still worked, but who knew what the modified Code.exe was doing in the background? A quick netstat -ano showed connections to an IP in the Netherlands—not Microsoft’s telemetry endpoints. visual studio code kuyhaa