via: 1-Click GitHub Token Stealing via a VSCode Bug – Ammar's Blog My blog, mostly about programming blog.ammaraskar.com ↗