devtake.dev — #oauthArticles tagged oauth on devtake.dev.https://devtake.dev/en-usVS Code's webview sandbox leaks GitHub tokens that read and write every private repohttps://devtake.dev/article/vscode-zero-day-github-token-theft/https://devtake.dev/article/vscode-zero-day-github-token-theft/A disclosed VS Code zero-day lets one click on a malicious github.dev notebook steal a GitHub OAuth token with full read-write access to every private repo.Wed, 03 Jun 2026 13:15:00 GMTsecuritysecuritygithubcredential-theftdev-toolsrcesupply-chainoauthluca-reinhardtVercel got breached through a third-party AI tool's OAuth app. Here's what leaked.https://devtake.dev/article/vercel-breach-april-2026/https://devtake.dev/article/vercel-breach-april-2026/A Context.ai compromise let attackers take over a Vercel employee's Google Workspace. Non-sensitive env vars were exposed, and a ShinyHunters persona is asking $2M.Mon, 20 Apr 2026 09:00:00 GMTsecurityverceldata-breachoauthsupply-chaincontext-aishinyhuntersgoogle-workspaceluca-reinhardt