VS Code flaw exposes GitHub OAuth tokens via one-click attack on GitHub.dev, enabling private repo access and token theft.
Fake QR code scam: Unlike regular web links, QR codes hide the destination URL until after you scan them, making it harder to ...