
VS Code Zero-Day Lets Hackers Steal GitHub Tokens in One Click
Security researcher Ammar Askar has published exploit code for an unpatched VS Code vulnerability that lets attackers steal GitHub OAuth tokens through a single malicious link. The flaw grants full access to all of a victim's public and private repositories. Microsoft has not yet released a patch.






















