Fetching from the wire…
01
02
03
04
05
06
07
08
Public story · 2026-02-25 · source-backed
Orca Security discovered "RoguePilot" — a passive prompt injection attack where malicious instructions hidden in GitHub Issues via HTML comment tags are automatically fed to GitHub Copilot when a developer opens a Codespace. The injected prompt exfiltrates the GITHUB_TOKEN, enabling full repository takeover with read/write access. This is a new class of AI-mediated supply chain attack — the coding assistant is weaponized against the developer it assists. GitHub has patched following coordinated disclosure. Action: Audit any workflow where AI agents process untrusted content (issues, comments, PRs) as execution context. (The Hacker News, SecurityWeek)
Each link below shares sources, entities, or timing with this story.
Claude Code competes with GitHub Copilot / Shared entities / Same source domain / Shared topic / What happened next
Linked by a graph relationship (Claude Code competes with GitHub Copilot); both cover GitHub, HTML, PRs; reported by the same outlet (securityweek.com).
Claude Code competes with GitHub Copilot / Shared entities / Shared topic / What happened next
Linked by a graph relationship (Claude Code competes with GitHub Copilot); both cover Audit, GitHub Copilot; overlapping topics (access, agent, attack, audit, copilot).
GitHub Copilot uses Claude / Shared entities / Same source domain / Shared topic / What happened next
Linked by a graph relationship (GitHub Copilot uses Claude); both cover Action, The Hacker News; reported by the same outlet (thehackernews.com).
Claude Code competes with GitHub Copilot / Shared entities / Shared topic / What happened next
Linked by a graph relationship (Claude Code competes with GitHub Copilot); both cover GitHub, GitHub Copilot; overlapping topics (action, agent, copilot, developer).
Linked by a graph relationship (Claude Code competes with GitHub Copilot); both cover Action, Audit; overlapping topics (action, agent, attack, audit).
Claude Code competes with GitHub Copilot / Shared entities / Shared topic / What happened next / Tension
Linked by a graph relationship (Claude Code competes with GitHub Copilot); both cover GitHub, PRs; overlapping topics (access, agent).
Linked by a graph relationship (Claude Code competes with GitHub Copilot); both cover GitHub, PRs; overlapping topics (agent, attack).
Claude Code competes with GitHub Copilot / Shared entities / Shared topic / What happened next
Linked by a graph relationship (Claude Code competes with GitHub Copilot); both cover GitHub, GitHub Copilot; overlapping topics (agent, copilot, developer).