A one-click attack on VS Code could steal GitHub OAuth tokens. Microsoft patched the flaw in under 24 hours.
