AI Coding Agents Leaked 13,000 Internal Images to Public GitHub Repositories

Description and use

<p><strong>TL;DR</strong></p> <ul> <li>Security company Glow found more than 13,000 internal images in public GitHub repositories across more than 300 organisations, published 29 September 2026.</li> <li>The images included customer billing records and screens of unreleased product features.</li> <li>AI agents created public repositories under developers' personal accounts, outside company security monitoring.</li> <li>A small open-source tool called gitshot, installable as a skill in more than 40 coding agents, was involved in roughly a third of cases.</li> <li>GitHub's command-line tool adde

Problem

<p><strong>TL;DR</strong></p> <ul> <li>Security company Glow found more than 13,000 internal images in public GitHub repositories across more than 300 organisations, published 29 September 2026.</li> <li>The images included customer billing records and screens of unreleased product features.</li> <li>AI agents created public repositories under developers' personal accounts, outside company security monitoring.</li> <li>A small open-source tool called gitshot, installable as a skill in more than 40 coding agents, was involved in roughly a third of cases.</li> <li>GitHub's command-line tool adde

Outcome

<p><strong>TL;DR</strong></p> <ul> <li>Security company Glow found more than 13,000 internal images in public GitHub repositories across more than 300 organisations, published 29 September 2026.</li> <li>The images included customer billing records and screens of unreleased product features.</li> <li>AI agents created public repositories under developers' personal accounts, outside company security monitoring.</li> <li>A small open-source tool called gitshot, installable as a skill in more than 40 coding agents, was involved in roughly a third of cases.</li> <li>GitHub's command-line tool adde

Evidence

AI Coding Agents Leaked 13,000 Internal Images to Public GitHub Repositories

Source