Device code phishing is rapidly emerging as a significant cybersecurity threat, exploiting the OAuth 2.0 device authorization grant to steal access tokens. This method targets input-constrained devices such as smart TVs and printers, which are becoming increasingly common in various applications. In less than six months, what started as a niche tactic has transformed into a widespread issue, affecting numerous platforms and services. The shift in usage patterns has made it easier for attackers to exploit this vulnerability, putting many users at risk. As more applications adopt this login flow, it becomes crucial for developers and companies to implement stronger security measures to protect users from these phishing attempts.