3,800 GitHub repos got breached by one VSCode extension. Here's the 5-minute audit that saves yours.

A malicious VSCode extension breached 3,800 GitHub repositories, exfiltrating tokens and credentials. The attack exploited extension file access permissions to collect sensitive data and send it to an attacker-controlled server.