Thanks to Jose Ventura for sharing great tips to protect yourself from bad people trying to take advantage of developers. 🙏
I liked these 2 in particular because they remove the likelihood of executing code unknowingly:
👉 Use GitHub's web editor by pressing "." on any repo
👉 Change your VSCode settings to set "task.allowAutomaticTasks" to "off"