GitHub has confirmed an attack via an extension for Visual Studio Code. The stolen data is apparently for sale on a ...