VS Code zero-day lets hackers steal GitHub tokens in one click
(bleepingcomputer.com)
1.
2.
1-Click GitHub Token Stealing via a VSCode Bug
(news.ycombinator.com)