---
id: 1359
title: "Prompt injection engineering for attackers: Exploiting GitHub Copilot"
source_domain: blog.trailofbits.com
source_url: "https://blog.trailofbits.com/2025/08/06/prompt-injection-engineering-for-attackers-exploiting-github-copilot/"
published_at: "2025-08-06 04:00"
tags: ["ai-security", "prompt-injection", "llm-security", "ai-agents", "backdoor", "trail-of-bits", "github-copilot"]
phying_url: "https://phying.com/item/1359"
lang: en
---

# Prompt injection engineering for attackers: Exploiting GitHub Copilot

## Summary

Trail of Bits demonstrates a prompt injection exploit against GitHub Copilot's coding agent, where a crafted GitHub issue tricks Copilot into inserting a hidden backdoor in its pull request.

## Intelligence Metadata

- **Sources:** blog.trailofbits.com
- **Published:** 2025-08-06 04:00
- **Original:** https://blog.trailofbits.com/2025/08/06/prompt-injection-engineering-for-attackers-exploiting-github-copilot/
- **Phying News:** https://phying.com/item/1359