1-Click GitHub Token Stealing via a VSCode Bug 2 months agotl;dr: never press github.dev or open vscode.dev on a repo you don't trust 0ThreadHN