VS Code’s Token Security: Keeping Your Secrets… Not So Secretly
FYI to all the VS Code peeps out there that malicious extensions can gain access to secrets stored by other VS Code extensions as well as the tokens used by VS Code for Microsoft/Github....
![](https://kbin.life/media/cache/resolve/entry_thumb/9c/bb/9cbbe815dc3e46baf5a8834337c7de1647bf4c7720f1d453559bf64faea0b1d8.webp)