VS Code flaw exposes GitHub OAuth tokens via one-click attack on GitHub.dev, enabling private repo access and token theft.

There's really nothing VS Code can't do ...

Your VS Code workflow is probably slower than it needs to be, but if you use the Command Palette you'll be faster.

Microsoft's May 2026 VS Code update makes BYOK usable in restricted environments while adding agent, browser and issue-reporting updates.

For more than a year, a self-propagating worm rode VS Code extensions, npm packages, and stolen developer credentials through ...