I haven’t seen it but the article makes it sound like, when you ask for it to make a change to your code, that’s the point it puts the ad in.

I think (but not 100% sure) that it also puts it directly into your codebase, without you knowing ahead of time, without your permission. If that’s correct then it’s truly heinous.