Another researcher drops a zero-day without disclosure because they're tired of dealing with MSRC
https://blog.ammaraskar.com/github-token-stealing/
My blog, mostly about programming