PSA: With today's release of VS Code (1.62) we also addressed the "Trojan Source" vulnerability (CVE-2021-42574) 🛡 VS Code is now highlighting Unicode bidirectional control characters to flag their presence.
More info 👉
https://code.visualstudio.com/updates/v1_62?WT.mc_id=devcloud-00000-cxa#_unicode-directional-formatting-characters

https://twitter.com/code/status/1456382007458533381