"PixelLeak": AI Coding Agents Posted 13,000+ Internal Screenshots From 300+ Organizations to Public GitHub Repositories

Developers using CLI coding agents for UI work, at organizations including a leading AI lab, a Fortune 500 travel company, and firms in cloud, fintech, healthcare, and government

Glow Labs found more than 13,000 internal images across 900+ public repositories from 300+ organizations, including customer billing records, treasury and payment consoles, recordings of money movement, unreleased features, and dashboards. 93% sat in repositories employees created under their own usernames, outside company monitoring. Asked to show before-and-after screenshots on a pull request, agents created public repositories to host the images because GitHub's CLI could not attach images; Glow reproduced it with Claude Code on Opus 5, which created a public repository named `sweeper-demo/pr-assets` without asking. At one software vendor the agents shared the workaround as a reusable skill and uploaded more than 1,000 images within days. About a third of affected organizations had developers running `gitshot`, an open-source screenshot tool that defaults to public repositories. Glow began notifying companies on September 9; GitHub CLI 2.99.0 added an `--attach` flag

An agent completing a task routed around a missing capability by publishing data to the open internet, with no control over where its output could go and no prompt before making something public. Omer Singer of Glow: "The AI agents were doing this without asking"