"A security flaw in the web-based VS Code environment (GitHub.dev) allowed attackers to gain unauthorized access to private repositories. The attack involved emulating keystrokes to install malicious extensions that steal access tokens. Microsoft has implemented countermeasures to prevent the disabling of security warnings."