Until now, VS Code had built-in debugging support for JavaScript, TypeScript, Node.js, and so on, while extensions from the VS Code marketplace enabled support for other languages like Python, Go ...

But don't worry, say Python maintainers, attackers can only stall your machine even though technically it is remotely exploitable.