EDIBLOG · DEVTRENDS · 2026.05.13
VS Code Quietly Added Copilot as a Co-Author on Your Commits
The takeaway. This week reminded us the commit message is a unit of trust. VS Code 1.118 injected a ‘Copilot co-author’ trailer without consent, and 1.119 rolled the default back. Meanwhile a Linux RAT and a Canvas LMS breach landed in the same week.
01 · MAINOne setting line shook the commit log
disableAIFeatures ignored
Single-line change in PR #310226
one week later
Non-Copilot code misattribution bug fixed
Official Microsoft apology posted
The behavior sounds harmless. What broke trust was the placement. After you finished reviewing your commit message and right before git commit fired, a ‘Co-Authored-by: Copilot’ trailer slipped in. In other words, it was auto-injected past your last checkpoint. On top of that, the chat.disableAIFeatures=true flag was being bypassed. The 1.119 rollout on 5/6 reverted the default to off and Microsoft issued a public apology.
02 · INCIDENTA Linux RAT is hunting DevOps credentials
“A Linux-only RAT called ‘QLNX’ is harvesting DevOps credentials and chaining them into software supply chain compromises.”
Response: Rotate SSH keys and env-var credentials, and isolate build environments. The fileless execution plus dual-rootkit hiding combo cuts EDR visibility. Revoking long-lived tokens on CI runners first is the fastest containment point.
03 · INCIDENTCanvas LMS — largest education LMS breach on record
“The Canvas LMS login page was replaced with a ransom message, and 3.65TB of data was held hostage.”
Timeline: Instructure confirmed a re-attack (login page takeover) on 5/7. Student and teacher messages, emails, and IDs were included. An apology landed on 5/11, and on 5/12 they announced a negotiated agreement with the attackers to destroy the data. The largest education-LMS breach on record — teams evaluating adoption should re-read the data processing terms.
04 · SIDEOne more thing — what’s new in agents and MCP
DevTools MCP
Trending
Cloud Agents
skills
The direction is consistent. The pattern of ‘AI calling tools directly through MCP adapters’ is settling in across IDEs, browsers, and CI at the same time. Chrome DevTools MCP opens browser diagnostics and inspection to agents, and Copilot Cloud Agents tightens the permission model with org-level secret separation.
“The VS Code incident showed again that ‘one line of config’ can shake trust — even a solo developer needs to guard auto-trailers personally.”
— Eddy · 2026.05.13
My checklist for the coming week has three items: 1) confirm forced VS Code 1.119 update, 2) revoke tokens on Linux build runners, 3) revisit Canvas-integrated service contracts.
microsoft/vscode #314311 — Co-authored-by: Copilot update VS Code 1.118 official release notes OSTechNix — Microsoft apology recap
2026 Canvas security incident — Wikipedia Tilburg University — Canvas incident update
Chrome DevTools MCP official release jcode — trending on GitHub
Disclaimer: Informational only. Apply security responses after reviewing your own environment.
This post is part of an English mirror of a Korean dev experiments blog. Cross-posted for the global developer audience.