Back to article
BleepingComputer

VS Code zero-day lets hackers steal GitHub tokens in one click (opens in new tab)

Covers 2 stories See all stories this covers including A shared responsibility: Protecting customers through Coordinated Vulnerability DisclosureCovered by 3 sources See all sources covering this story including kite.kagi.com, igor´sLAB

Covers 2 related stories

microsoft.com·

A shared responsibility: Protecting customers through Coordinated Vulnerability Disclosure

Discussed on Hacker News
Feeds
blog.ammaraskar.com·

1-Click GitHub Token Stealing via a VSCode Bug

Feeds

Covered in 3 articles

igor´sLAB·

LeakWatch 2026 – Week 23: AI moves onto the PC, and attackers follow

Feeds
Metacurity·

Trump backs voluntary AI model reviews in cybersecurity-focused executive order

Feeds

In other languages

kite.kagi.com·

VS Code 결함으로 GitHub 토큰 탈취 위험 노출

Feeds

Keyboard Shortcuts

Navigation

Next / previous post
j/k
Open post
oorEnter
Preview post
v

Post Actions

Love post
a
Like post
l
Dislike post
d
Undo reaction
u
Save / unsave
s

Recommendations

Add interest / feed
Enter
Not interested
x

Go to

Home
gh
Interests
gi
Feeds
gf
Likes
gl
History
gy
Changelog
gc
Settings
gs
Discover
gb
Search
/

General

Show this help
?
Submit feedback
!
Close modal / unfocus
Esc

Press ? anytime to show this help