#oauth-theft

GitHub.dev One-Click Attack: Stealing OAuth Tokens via VS Code

New research reveals a one-click exploit in GitHub.dev and VS Code that allows attackers to steal full GitHub OAuth tokens and access private repositories.