VSCode bug exposes GitHub tokens to one-click theft

A vulnerability in Visual Studio Code allows attackers to steal GitHub authentication tokens through a single click, bypassing typical security boundaries. For developers using VSCode, this highlights the risk of token exposure in everyday tools—and underscores why credential management and editor security matter as much as application-level defenses.