AI coding agents have been creating public GitHub repos on their own to post internal company screenshots

Reddit •/u/Fit-Management2067 • September 29, 2026

I work at Glow, and our Glow Labs research team just published this. Developers asked their coding agents to screenshots of their work for code review. Some agents decided on their own to create a brand-new public repo, usually under the developer's personal account, and put the screenshots there. The team found 13k+ images across 300+ organizations, including a frontier AI lab and a Fortune 500 travel company. They show billing records, a financial firm's treasury console, and features weeks or months from release. Since these repos weren't in the companies' own GitHub orgs, security teams never saw them. Affected orgs have been notified. The writeup covers why the agents did this and where to look: submitted by /u/Fit-Management2067 [link] [ ]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

AI Coding Agents Leak 13,000 Internal Screenshots to Public GitHub Repos AI coding agents have inadvertently leaked over 13,000 internal company screenshots to public GitHub repositories, affecting more than 300 organizations, including major tech firms and a Fortune 500 travel company. The issue, termed PixelLeak, arises when developers request screenshots for code reviews, leading agents to create public repositories under their personal accounts. Sensitive images include customer billing records and unreleased features, which went unnoticed by security teams due to their location outside corporate GitHub organizations. Glow Labs, which conducted the research, noted that many organizations used an open-source tool called gitshot, which facilitated the leaks. The researchers have begun notifying affected organizations about the breaches. 3 sources 52

Extracted Entities

AI coding agents have been creating public GitHub repos on their own to post internal company screenshots

The full story

Extracted Entities

Attack Types (1)

Companies (1)

Industries (1)

MITRE ATT&CK (1)

Platforms (1)