Over 1.5 million GitHub pull requests have had ads injected into them by Microsoft Copilot’s coding agent.