1-Click GitHub Token Stealing via a VSCode Bug – Ammar's Blog

https://blog.ammaraskar.com/github-token-stealing/