A newly discovered vulnerability in Visual Studio Code allows attackers to steal GitHub authentication tokens with a single click. This security flaw puts developers at risk of having their repositories and sensitive source code compromised if the exploit is triggered.