A single malicious link in VSCode's webview can trigger theft of GitHub OAuth tokens, bypassing cross-origin isolation protections in the…
Sign in to your account
Remember me
