{"id":33348,"date":"2026-06-03T19:40:17","date_gmt":"2026-06-03T10:40:17","guid":{"rendered":"https:\/\/jore2.com\/community-11404-1-click-github-token-stealing-via-a-vscode-bug\/"},"modified":"2026-06-03T19:40:17","modified_gmt":"2026-06-03T10:40:17","slug":"community-11404-1-click-github-token-stealing-via-a-vscode-bug","status":"publish","type":"post","link":"https:\/\/jore2.com\/?p=33348","title":{"rendered":"VSCode \uc6f9 \ubc84\uc804\uc758 \uce58\uba85\uc801 \uacb0\ud568, \ud55c \ubc88\uc758 \ud074\ub9ad\uc73c\ub85c GitHub \ud1a0\ud070\uc774 \uc720\ucd9c\ub418\ub294 \uc774\uc720"},"content":{"rendered":"<div class=\"jore2-editor-byline\">\n<p><strong>\ud55c\uc11c\uc900<\/strong><\/p>\n<\/div>\n<p>\uac1c\ubc1c\uc790\ub4e4\uc774 \ub9e4\uc77c \uc0ac\uc6a9\ud558\ub294 \ub3c4\uad6c\uc778 VSCode \uc758 \uc6f9 \ubc84\uc804\uc774 \uce58\uba85\uc801\uc778 \ubcf4\uc548 \ucde8\uc57d\uc810\uc744 \ub4dc\ub7ec\ub0b4\uba70 \uae00\ub85c\ubc8c \uae30\uc220 \ucee4\ubba4\ub2c8\ud2f0\uc758 \uc8fc\ubaa9\uc744 \ubc1b\uace0 \uc788\uc2b5\ub2c8\ub2e4. \ubcf4\uc548 \uc5f0\uad6c\uc790 \uc544\ub9c8\ub974 \uc544\uc2a4\uce74\ub974\uac00 \uacf5\uac1c\ud55c \uc774 \ubc84\uadf8\ub294 \uc545\uc131 \ub9c1\ud06c\ub97c \ub2e8 \ud55c \ubc88 \ud074\ub9ad\ud558\ub294 \uac83\ub9cc\uc73c\ub85c \uc0ac\uc6a9\uc790\uc758 GitHub OAuth \ud1a0\ud070\uc744 \ud0c8\ucde8\ud560 \uc218 \uc788\ub2e4\ub294 \uc810\uc744 \ud575\uc2ec\uc73c\ub85c \ud569\ub2c8\ub2e4.<\/p>\n<p>\uc774\ub294 \ub2e8\uc21c\ud55c \uc811\uadfc \uad8c\ud55c \ubb38\uc81c\ub97c \ub118\uc5b4, \uac1c\uc778 \uc800\uc7a5\uc18c\uae4c\uc9c0 \ud3ec\ud568\ud574 \uc77d\uae30 \ubc0f \uc4f0\uae30 \uad8c\ud55c\uc744 \ubaa8\ub450 \uac00\uc9c4 \ud1a0\ud070\uc774 \uc720\ucd9c\ub420 \uc218 \uc788\uc74c\uc744 \uc758\ubbf8\ud569\ub2c8\ub2e4.<\/p>\n<p>\uc774\ub7ec\ud55c \ucde8\uc57d\uc810\uc774 \ubc1c\uc0dd\ud558\uac8c \ub41c \ubc30\uacbd\uc5d0\ub294 VSCode \uc758 \uc6f9 \uad6c\ud604 \ubc29\uc2dd\uc5d0 \uc228\uaca8\uc9c4 \uad6c\uc870\uc801 \ubb38\uc81c\uac00 \uc788\uc2b5\ub2c8\ub2e4. github.com \uc5d0\uc11c github.dev \ub85c \uc774\ub3d9\ud560 \ub54c, \uc2dc\uc2a4\ud15c\uc740 \ud604\uc7ac \uc5f4\ub824 \uc788\ub294 \uc800\uc7a5\uc18c\ubfd0\ub9cc \uc544\ub2c8\ub77c \uc0ac\uc6a9\uc790\uac00 \uc811\uadfc \uac00\ub2a5\ud55c \ubaa8\ub4e0 \uc800\uc7a5\uc18c\uc5d0 \ub300\ud55c \uc804\uccb4 \uad8c\ud55c\uc744 \uac00\uc9c4 OAuth \ud1a0\ud070\uc744 \uc790\ub3d9\uc73c\ub85c \uc138\uc158\uc5d0 \uc804\ub2ec\ud569\ub2c8\ub2e4.<\/p>\n<p>\uc774 \ud1a0\ud070\uc740 \ud2b9\uc815 \uc800\uc7a5\uc18c\ub85c \uc81c\ud55c\ub418\uc9c0 \uc54a\uc740 \uc804\uc5ed \uad8c\ud55c\uc744 \uac00\uc9c0\uba70, \ube0c\ub77c\uc6b0\uc800 \ub0b4\uc5d0\uc11c \uc2e4\ud589\ub418\ub294 VSCode \uc758 \ubc29\ub300\ud55c TypeScript \ucf54\ub4dc\ubca0\uc774\uc2a4\uc640 \uacb0\ud569\ub418\uba74\uc11c \uacf5\uaca9\uc790\ub4e4\uc5d0\uac8c \ub9e4\ub825\uc801\uc778 \ud45c\uc801\uc774 \ub429\ub2c8\ub2e4.<\/p>\n<p>\uacf5\uaca9 \uba54\ucee4\ub2c8\uc998\uc740 VSCode \uac00 \uc6f9\ubdf0\ub97c \ud1b5\ud574 \uaca9\ub9ac\ub41c \ud658\uacbd\uc744 \uc720\uc9c0\ud558\ub824\ub294 \uc2dc\ub3c4\uc5d0\uc11c \ube44\ub86f\ub41c \uc5ed\uc124\uc744 \ubcf4\uc5ec\uc90d\ub2c8\ub2e4. \ub9c8\ud06c\ub2e4\uc6b4 \ubbf8\ub9ac\ubcf4\uae30\ub098 \uc8fc\ud53c\ud130 \ub178\ud2b8\ubd81 \ucd9c\ub825\uacfc \uac19\uc740 \uae30\ub2a5\uc740 \uc0cc\ub4dc\ubc15\uc2a4\ud654\ub41c iframe \ub0b4\ubd80\uc5d0\uc11c \uc2e4\ud589\ub418\ub294\ub370, \uc774 \ud658\uacbd\uacfc \uba54\uc778 \ud3b8\uc9d1\uae30 \uac04\uc758 \ud1b5\uc2e0\uc744 \uc704\ud574 Window.postMessage API \uac00 \uc0ac\uc6a9\ub429\ub2c8\ub2e4.<\/p>\n<p>\ubb38\uc81c\ub294 \uc774 \ud1b5\uc2e0 \uacfc\uc815\uc5d0\uc11c \uc6f9\ubdf0 \ub0b4\ubd80\uc758 \ud0a4\ubcf4\ub4dc \uc774\ubca4\ud2b8\uac00 \uba54\uc778 \uc708\ub3c4\uc6b0\ub85c \uc804\ub2ec\ub418\ub294 \ubc29\uc2dd\uc5d0 \uc228\uc5b4 \uc788\uc73c\uba70, \uc774\ub97c \uc545\uc6a9\ud55c \uacf5\uaca9\uc790\uac00 \ud1a0\ud070\uc744 \uc870\uc6a9\ud788 \ucd94\ucd9c\ud574\ub0bc \uc218 \uc788\ub2e4\ub294 \uc810\uc785\ub2c8\ub2e4.<\/p>\n<p>\uac1c\ubc1c \ucee4\ubba4\ub2c8\ud2f0\uc758 \ubc18\uc751\uc740 \ub2e8\uc21c\ud55c \ud638\uae30\uc2ec\uc744 \ub118\uc5b4 \uae30\uc874 \ubcf4\uc548 \uad00\ud589\uc5d0 \ub300\ud55c \uadfc\ubcf8\uc801\uc778 \uc131\ucc30\ub85c \uc774\uc5b4\uc9c0\uace0 \uc788\uc2b5\ub2c8\ub2e4. \ub9ce\uc740 \uac1c\ubc1c\uc790\uac00 VSCode \ud655\uc7a5 \ud504\ub85c\uadf8\ub7a8\uc744 \uc218\uc2ed \uac1c\uc529 \uc124\uce58\ud574 \uc0ac\uc6a9\ud558\uc9c0\ub9cc, \uc774 \ud655\uc7a5 \ud504\ub85c\uadf8\ub7a8\ub4e4\uc774 \ud3b8\uc9d1\uae30 \uc790\uccb4\uc640 \ub3d9\uc77c\ud55c \uc2e0\ub8b0 \uc218\uc900\uc744 \uac00\uc9c4\ub2e4\ub294 \uc0ac\uc2e4\uc744 \uac04\uacfc\ud558\uae30 \uc27d\uc2b5\ub2c8\ub2e4.<\/p>\n<p>\uc545\uc131 \ub610\ub294 \uac10\uc5fc\ub41c \ud655\uc7a5 \ud504\ub85c\uadf8\ub7a8\uc774 \ub124\ud2b8\uc6cc\ud06c \ubaa8\ub2c8\ud130\ub9c1 \uc5c6\uc774\ub3c4 \ud1a0\ud070\uc744 \uc720\ucd9c\ud560 \uc218 \uc788\ub2e4\ub294 \uc810\uc740, \uac1c\ubc1c \ud658\uacbd\uc758 \uaca9\ub9ac \uc804\ub7b5\uc774 \uc2e4\uc81c\ub85c \uc5bc\ub9c8\ub098 \ucde8\uc57d\ud560 \uc218 \uc788\ub294\uc9c0\ub97c \uc801\ub098\ub77c\ud558\uac8c \ubcf4\uc5ec\uc90d\ub2c8\ub2e4.<\/p>\n<p>\uc774\ubc88 \uc0ac\ud0dc\ub294 \ud5a5\ud6c4 \uac1c\ubc1c \ub3c4\uad6c \uc124\uacc4 \ubc29\uc2dd\uc5d0 \uc911\uc694\ud55c \ubcc0\ud654\ub97c \uc608\uace0\ud569\ub2c8\ub2e4. \ube0c\ub77c\uc6b0\uc800 \uae30\ubc18 IDE \uac00 \ud2b9\uc815 \uc800\uc7a5\uc18c\uc5d0\ub9cc \uc81c\ud55c\ub41c \uc784\uc2dc \ud1a0\ud070\uc744 \uc0ac\uc6a9\ud558\ub294 \ubc29\ud5a5\uc73c\ub85c \uac1c\uc120\ub420\uc9c0, \uc544\ub2c8\uba74 \ud604\uc7ac\uc758 \uc804\uc5ed \uad8c\ud55c \ubc29\uc2dd\uc744 \uc720\uc9c0\ud560\uc9c0 \uc5ec\ubd80\uac00 \uc8fc\ubaa9\ub429\ub2c8\ub2e4.<\/p>\n<p>\ub610\ud55c \ub9c8\uc774\ud06c\ub85c\uc18c\ud504\ud2b8\uc758 \ubcf4\uc548 \ub300\uc751 \uc13c\ud130\uac00 \uc5f0\uad6c\uc790\ub4e4\uc758 \ubcf4\uace0\uc5d0 \uc5b4\ub5bb\uac8c \ubc18\uc751\ud560\uc9c0\ub3c4 \uc911\uc694\ud55c \uad00\uc804 \ud3ec\uc778\ud2b8\uac00 \ub420 \uac83\uc785\ub2c8\ub2e4. \uac1c\ubc1c\uc790\ub4e4\uc740 \uc774\uc81c \uc790\uc2e0\uc758 \ud1a0\ud070\uc744 \ub2e8\uc21c\ud788 \uc2e0\ub8b0\ud558\ub294 \uac83\uc744 \ub118\uc5b4, \ud658\uacbd\ubcc4\ub85c \uad8c\ud55c\uc744 \ubd84\ub9ac\ud558\uace0 \ud53c\ud574\ub97c \ud1b5\uc81c\ud558\ub294 \uc0c8\ub85c\uc6b4 \ubcf4\uc548 \uc804\ub7b5\uc744 \ubaa8\uc0c9\ud574\uc57c \ud560 \uc2dc\uc810\uc5d0 \uc130\uc2b5\ub2c8\ub2e4.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>\ube0c\ub77c\uc6b0\uc800\uc5d0\uc11c \uc2e4\ud589\ub418\ub294 VSCode \uac00 \uac00\uc9c4 \ubcf4\uc548 \ud5c8\uc810\uc774 \uac1c\ubc1c\uc790\ub4e4\uc758 GitHub OAuth \ud1a0\ud070\uc744 \ud55c \ubc88\uc758 \ud074\ub9ad\uc73c\ub85c \ud0c8\ucde8\ud560 \uc218 \uc788\ub2e4\ub294 \uc0ac\uc2e4\uc774 \uacf5\uac1c\ub418\uba70 \uae30\uc220\uacc4\uc758 \uc774\ubaa9\uc744 \uc9d1\uc911\uc2dc\ud0a4\uace0 \uc788\uc2b5\ub2c8\ub2e4. \ub2e8\uc21c\ud55c \ubc84\uadf8\ub97c \ub118\uc5b4 \uac1c\ubc1c \ud658\uacbd\uc758 \uc2e0\ub8b0 \uad6c\uc870 \uc790\uccb4\uc5d0 \uc758\ubb38\uc744 \uc81c\uae30\ud558\ub294 \uc774\ubc88 \uc0ac\ud0dc\uc758 \ubc30\uacbd\uacfc \ud5a5\ud6c4 \ud750\ub984\uc744 \ubd84\uc11d\ud569\ub2c8\ub2e4.<\/p>\n","protected":false},"author":3,"featured_media":33347,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[406],"tags":[3346,6913,20120,4438,4241,23432],"class_list":["post-33348","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-406","tag-github","tag-oauth","tag-vscode","tag-4438","tag-4241","tag-23432"],"featured_image_urls":{"full":["https:\/\/jore2.com\/wp-content\/uploads\/2026\/06\/community-11404-1-click-github-token-stealing-via-a-vscode-bug.png",1200,630,false],"thumbnail":["https:\/\/jore2.com\/wp-content\/uploads\/2026\/06\/community-11404-1-click-github-token-stealing-via-a-vscode-bug-150x150.png",150,150,true],"medium":["https:\/\/jore2.com\/wp-content\/uploads\/2026\/06\/community-11404-1-click-github-token-stealing-via-a-vscode-bug-300x158.png",300,158,true],"medium_large":["https:\/\/jore2.com\/wp-content\/uploads\/2026\/06\/community-11404-1-click-github-token-stealing-via-a-vscode-bug-768x403.png",640,336,true],"large":["https:\/\/jore2.com\/wp-content\/uploads\/2026\/06\/community-11404-1-click-github-token-stealing-via-a-vscode-bug-1024x538.png",640,336,true],"1536x1536":["https:\/\/jore2.com\/wp-content\/uploads\/2026\/06\/community-11404-1-click-github-token-stealing-via-a-vscode-bug.png",1200,630,false],"2048x2048":["https:\/\/jore2.com\/wp-content\/uploads\/2026\/06\/community-11404-1-click-github-token-stealing-via-a-vscode-bug.png",1200,630,false],"morenews-large":["https:\/\/jore2.com\/wp-content\/uploads\/2026\/06\/community-11404-1-click-github-token-stealing-via-a-vscode-bug-825x575.png",825,575,true],"morenews-medium":["https:\/\/jore2.com\/wp-content\/uploads\/2026\/06\/community-11404-1-click-github-token-stealing-via-a-vscode-bug-590x410.png",590,410,true]},"author_info":{"info":["\ud55c\uc11c\uc900"]},"category_info":"<a href=\"https:\/\/jore2.com\/?cat=406\" rel=\"category\">\uc694\uc998\ub728\ub294\uc18c\uc2dd<\/a>","tag_info":"\uc694\uc998\ub728\ub294\uc18c\uc2dd","comment_count":"0","_links":{"self":[{"href":"https:\/\/jore2.com\/index.php?rest_route=\/wp\/v2\/posts\/33348","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/jore2.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/jore2.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/jore2.com\/index.php?rest_route=\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/jore2.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=33348"}],"version-history":[{"count":0,"href":"https:\/\/jore2.com\/index.php?rest_route=\/wp\/v2\/posts\/33348\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/jore2.com\/index.php?rest_route=\/wp\/v2\/media\/33347"}],"wp:attachment":[{"href":"https:\/\/jore2.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=33348"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/jore2.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=33348"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/jore2.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=33348"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}