VS Code's Token Security: Keeping Your Secrets... Not So Secretly - Cycode ( cycode.com )
This is the full story of the vulnerability we have discovered within Visual Studio Code (VS Code) concerning the handling of secure token storage. While designed for isolated storage for each extension, this vulnerability presents a high-risk “Token Stealing” attack. A malicious extension could expose third-party...
