Mastodon Feed: Post

Mastodon Feed

baldur@toot.cafe ("Baldur Bjarnason") wrote:

“1-Click GitHub Token Stealing via a VSCode Bug – Ammar's Blog”

https://blog.ammaraskar.com/github-token-stealing/

VS Code is insecure as designed.