Full threadcyh555·the title should be changed to '1-Click GitHub Token Stealing via a VSCode Bug in the websites vscode.dev and github.dev* only'View on HN