# EMBRACE: AI Coding Tools Leaking SSH Keys — Two Unpatched

> Source: <https://byteiota.com/embrace-ai-coding-tools-leaking-ssh-keys-two-unpatched/>
> Published: 2026-10-30 02:16:03+00:00

Forever Security's EMBRACE research found VS Code and Codex can drain SSH keys and credentials with one HTML file. Two tools remain unpatched with 45 million users exposed.

The post 
EMBRACE: AI Coding Tools Leaking SSH Keys — Two Unpatched
 appeared first on 
byteiota
.