If you did webshit in eclipse, especially with NPM involved, it would be just as bad. Running arbitrary code from a downloaded bundle seems normal in that world.

> Im guessing the answer is probably Java is why eclipse is out of favor.

I don't get the connection, but Java had log4j, i.e. a remote code execution vulnerability.