Security News One-Click GitHub Dev Attack Lets Attackers Steal Full GitHub OAuth Tokens TheHackerNews Daniel Bender 03 Jun 2026 Share VS Code flaw exposes GitHub OAuth tokens via one-click attack on GitHub.dev, enabling private repo access and token theft.