VSCode vulnerability allows one-click GitHub token theft

A security researcher discovered a bug in VSCode that lets attackers steal GitHub tokens with minimal user interaction. The vulnerability highlights how even trusted development tools can become attack vectors—a sobering reminder for indie developers to scrutinize extensions and keep their editors patched.