A security researcher has publicly disclosed a new Visual Studio Code zero-day vulnerability that can reportedly let ...

A researcher has disclosed details of a severe VS Code vulnerability that can be exploited to steal GitHub tokens and access ...

GitHub says hackers stole about 3,800 internal repos after a poisoned VS Code extension hit an employee device ...

GitHubは2026年5月20日、GitHubの従業員端末が「悪意のあるコードが仕込まれたVS Code拡張機能」によって侵害され、GitHub内部リポジトリのデータが外部に送信されたと発表しました。攻撃者側は約3800件のリポジトリにアクセスしたと主張しており、GitHubは「攻撃 ...

The code hosting giant GitHub said it was investigating a breach, but said there was no evidence of customer data theft.

VS Code flaw exposes GitHub OAuth tokens via one-click attack on GitHub.dev, enabling private repo access and token theft.

A reported software supply chain attack involving a malicious Visual Studio Code extension has exposed the growing security risks surrounding modern development environments. According to published ...