The GitHub Breach Through VS Code Is the One I Warned About

GitHub confirmed unauthorized access through a malicious VS Code extension — an attack surface I presented at Black Hat MEA last December. Here's how I see it.