A cybersecurity vulnerability has been discovered that allows attackers to steal GitHub tokens through a one-click attack. This attack is made possible via Microsoft Visual Studio Code. The attack can be initiated by simply clicking a link, which can then grant the attacker access to the user's GitHub repositories, including private ones. This vulnerability is significant as it can allow attackers to read and write to repositories without the user's knowledge or consent.

AI summaries can be wrong sometimes—always verify important details using the source article.