📄 中文摘要
GitHub Copilot CLI 的安全性受到质疑，研究表明该工具可能下载并执行恶意软件。用户在使用 Copilot CLI 时，可能会无意中运行恶意代码，这对开发者和企业构成潜在威胁。恶意软件可以通过各种方式潜入用户的开发环境，导致数据泄露、系统损坏等严重后果。开发者和安全专家呼吁加强对 AI 工具的安全审查，以防止此类事件的发生，确保开发环境的安全性和可靠性。
GitHub Copilot CLI 下载并执行恶意软件
出处: GitHub Copilot CLI downloads and executes malware
发布: 2026年2月28日
📄 English Summary
GitHub Copilot CLI downloads and executes malware
The security of GitHub Copilot CLI has come under scrutiny, as research indicates that the tool may download and execute malware. Users might inadvertently run malicious code while using Copilot CLI, posing potential threats to developers and organizations. Malware can infiltrate users' development environments through various means, leading to severe consequences such as data breaches and system damage. Developers and security experts are calling for enhanced security reviews of AI tools to prevent such incidents and ensure the safety and reliability of development environments.