No
Turns out no amount of communication to the team matters when you set Copilot to autopilot and it’s not aware of the compromised packages
ofjcihen on Hacker News
In the thread “GitHub confirms breach of 3,800 repos via malicious VSCode extension”, replying to this comment
Got in the way: Copilot autopilot was unaware of compromised packages.
Did work for a company last week that get popped pretty badly during a round of Shai even though they were aware of the packages. Turns out no amount of communication to the team matters when you set Copilot to autopilot and it’s not aware of the compromised packages. I suspect that’s going to be a trend.