zlacker

>>orph+(OP)
Still no way to opt your code out of this.

Disgusting.

>>snvzz+1o
A friend of a friend, told me he is furiously adding code to Github, with subtle security bugs. He can't wait for it to show up in the proper places...Courtesy of Copilot ;-)

>>belter+wt
This attack has been studied!

https://arxiv.org/abs/2007.02220

Although our own work shows Copilot is pretty good at adding security flaws on its own:

https://arxiv.org/abs/2108.09293