News for hackers. Stuff that matters.
Re:Microsoft's open source tools were hacked to steal passwo... by domh on Tuesday June 09, 2026 @06:21AM (#48459095)
Web-based IDEs like VSCode on github just had a 1-click github token stealing vulnerability: https://blog.ammaraskar.com/github-token-stealing/

You could argue this is probably on GitHub for creating a token here that gives blanket access to all repos vs a scoped token for just the repo.

There are no comments on this comment yet.