
Proof-of-concept exploit demonstrating a GitHub OAuth token-stealing vulnerability via crafted developer workflow triggers, enabling unauthorized repository access.
Proof of concept for vulnerability from https://blog.ammaraskar.com/github-token-stealing