Platforms Enterprise It SecurityEnterprise Security Item

GitHub Copilot ad injection into pull requests

March 30, 2026Gray Hats, Sam Stepanyan

Gray Hats and Sam Stepanyan claim GitHub Copilot injected ads into PRs at scale, raising trust and integrity concerns for AI-assisted coding in enterprise workflows.

GitHub Copilot was caught secretly injecting ads for Raycast and Microsoft Teams into 11,000+ PRs.
Copilot injected an ad into a Pull Request text:
Gray Hats
Sam Stepanyan
githubcopilotintegritygithubmicrosoft

See what experts are saying right now

This finding is one of many signals tracked across Cyber Security. The live feed updates every few hours with new expert voices, debates, and emerging ideas.

← Back to Cyber Security