Authentication token theft by extensions likely with Microsoft VS Code vulnerability

BleepingComputer reports that malicious extensions could facilitate the theft of Windows, macOS, and Linux credential manager-stored authentication tokens using a vulnerability in the Microsoft Visual Studio Code editor and development environment.

authentication authentication token bleepingcomputer code code vulnerability credential development editor environment extensions linux macos malicious manager microsoft reports studio theft token tokens token theft visual studio visual studio code vs code vulnerability windows