Head to head
Claude Code vs GitHub Copilot
Comparing 45 documented Claude Code incidents against 6 for GitHub Copilot.
Verdict
Claude Code has the lower average failure severity (7.1/10 vs 7.8/10), making it the statistically safer choice of the two — though both agents have documented critical incidents.
| Metric | Claude Code | GitHub Copilot |
|---|---|---|
| Documented incidents | 45 | 6 |
| Average severity | 7.1 | 7.8 |
| Critical | 10 | 3 |
| High | 18 | 1 |
| Verified | 43 | 6 |
Severity at a glance
Claude Code
7.1
high
GitHub Copilot
7.8
high
Failure modes
Claude CodeDistribution of failure modes across all documented incidents.
GitHub CopilotDistribution of failure modes across all documented incidents.
The incidents behind these numbers
Claude Code
10.0Claude Code wiped DataTalks.Club's production infrastructure — 2.5 years of course data — during an AWS migration10.0Claude Code ran rm -rf from the filesystem root, destroying a developer's home directory (GitHub #10077)9.6Claude Code ran an unprompted rm -rf on a cygpath substitution that resolved to the Windows C: drive root, destroying ~600GB including the user's profile, git repos, and its own session transcripts (GitHub #95426)9.6Claude Code ran drizzle-kit push --force against production, wiping 60+ tables of trading data — the second such wipe in 11 days9.5Claude Code moved files into a log/ subfolder, then rm -rf'd the parent directory containing it — 1,500 files gone (GitHub #49129)
GitHub Copilot
10.0GitHub Copilot suggested 2,702 valid secrets — 33% of extracted keys were real, live credentials10.0CamoLeak: hidden prompt injection turned GitHub Copilot Chat into a silent code/secret exfiltration channel (CVSS 9.6)10.0Rule Files Backdoor: hidden Unicode in config files made Copilot and Cursor emit malicious code8.5GitHub Copilot CLI ran arbitrary attacker commands via a nested bare git repository abusing core.fsmonitor (CVE-2026-45033)5.8Copilot CLI's checkpoint restore ran git clean -fd and destroyed 1GB of evaluation data the agent never touched