GitHub Copilot Chat 0.44.1 – Possible Malicious Release

Hi All,

Not really sure if this is the correct place to post this, but it looks like the VS Code release mechanism might have been compromised. The Visual Studio Marketplace has a release today of 0.44.1, but the github page shows no such release present (not even 0.44.0). Given the recent slew of supply chain hits I am a bit suspicious.

1 comment

[ 4.6 ms ] story [ 10.5 ms ] thread

speakingmoistly 3mo ago ↗

The better place to flag this would probably be on their issue tracker. The release on the marketplace being five hours ago, it's not unlikely that GH releases are manual and lagging behind (seeing plenty of this in projects that publish container images, the updated image comes through Renovate hours before anything shows up on release pages).