Dossier
token-stealing exploit
Coverage of token-stealing exploit in the Nexus archive.
- Researcher publishes GitHub token-stealing exploit, blames Microsoft’s disclosure process
Security researcher Ammar Askar published a GitHub token-stealing proof-of-concept exploit on his blog and a public tracker for VS Code issues, notifying GitHub's security contact about an hour before the release. He criticized Microsoft's disclosure process for contributing to the situation.