The recently introduced searchLogins method is not aware of guid, and in the absence of any properties it would recognize, it turns the query into a findLogins query for everything. Then, the first one in the result set gets updated with the wrong info.
From Issue 77: