VS Code flaw exposes GitHub OAuth tokens via one-click attack on GitHub.dev, enabling private repo access and token theft.
A researcher has disclosed details of a severe VS Code vulnerability that can be exploited to steal GitHub tokens and access ...
A github.dev flaw could let attackers steal GitHub OAuth tokens through a one-click attack, exposing private repositories and ...
A flaw in Anthropic’s Claude Code GitHub Action allowed a malicious GitHub issue from a bot actor to trigger workflows and ...
The tool gathered over 29,000 downloads before the malicious npm package was identified ...
The Mitiga disclosure is the most recent, but it is not the first time Claude Code’s configuration model has created a ...
Six Microsoft 365 Android apps contain an identical flaw that could risk billions of downloads being compromised. The ...
Build artifacts generated by GitHub Actions often contain access tokens that can be abused by attackers to push malicious code into projects or compromise cloud infrastructure. An analysis of build ...
Some results have been hidden because they may be inaccessible to you
Show inaccessible results