
vscode-github-token-grab-extension
Extension to grab github token from VSCode
data-exfiltrationmalware-analysissupply-chain-security+1
9

Extension to grab github token from VSCode

Proof-of-concept for CVE-2021-26700: remote code execution in the VSCode npm-script extension via malicious workspace settings.json, with detailed…