A VS Code exploit for github.dev can steal GitHub OAuth tokens after one malicious link, exposing private repositories while teams await a patch.
A researcher has disclosed details of a severe VS Code vulnerability that can be exploited to steal GitHub tokens and access ...
A github.dev flaw could let attackers steal GitHub OAuth tokens through a one-click attack, exposing private repositories and ...
Microsoft has had a VS Code extension for a long time, and it finally came back to bite them.
GitHub confirmed an attacker was able to access its internal repositories after a code extension breach, with TeamPCP claiming credit.