The agent is doing the actual work, and VS Code is just a window.
Fake Claude Code installer malware used Google Ads to place spoofed AI tool pages above real documentation since March 2026.