1-Click GitHub Token Stealing via a VSCode Bug