The attack vector is available for rent at scale, and evades AV and EDR, leaving YARA analysis as the best detection option.
Default VS Code settings were slowing me down ...