Attack on GitHub.dev steals OAuth token for all repos

The web version of the VS Code editor on GitHub.dev had a security vulnerability that allowed attackers to take over all of a ...
The Hacker News

Miasma Worm Hits 73 Microsoft GitHub Repositories in Major Supply Chain Attack

Miasma hit 73 Microsoft repos across four GitHub orgs, forcing access disablement and exposing open-source trust risks.
gihyo.jp

VS Code 1.123リリース、問題のある拡張機能リリースへの対策として ...

Microsoftは2026年6月3日、Visual Studio Code （VS Code） 1.