A Microsoft Security Response Center entry and several third‑party trackers that cover developer‑tool security describe a worrying pattern: AI‑driven editor integrations such as GitHub Copilot and Visual Studio/Visual Studio Code extensions can, under certain conditions, be coerced into...