Re:GitHub Copilot Chat 0.44.1 – Possible Malicious Release
by warhorse10_9 on Thursday April 16, 2026 @05:40PM
(#47799857)
Thanks, I followed their security.md to contact them. Appreciate the insight on a possible standard lack of synchronous versions.
[ Parent
| on HN ]
Re:GitHub Copilot Chat 0.44.1 – Possible Malicious Release
by speakingmoistly on Thursday April 16, 2026 @10:14PM
(#47801827)
> Appreciate the insight on a possible standard lack of synchronous versions.
Looking closer at the commit and release history, it looks like poor release hygiene, really. Commits hint at a 0.44.0 release that doesn't show up in tags and the changelog file that is included with the source (in the extension that you pull down and the repository) isn't readily maintained.
The absence of a verifiable link between the marketplace artifacts and the underlying code should probably give people pause about the trustworthiness of the extension. I bet a good chunk of what's on that marketplace is in that situation.