VSCode's SSH Remote Agent Is as Invasive as a Trojan

VSCode's SSH Agent Is Bananas

Thomas Ptacek from Fly.io dissects VSCode's SSH remote editing feature. Unlike Emacs' lightweight Tramp, it downloads a full Node binary to the remote machine, communicates via WebSocket, and can read/write files, spawn shell PTYs, and persist itself. The author calls it 'bananas' and warns against using it on dev servers or production.