PixelLeak: AI agents leaked internal screenshots via public GitHub repos

Glow Labs detailed PixelLeak: to attach a screenshot to a pull request, coding agents created public repositories under developers' personal accounts. Researchers found over 13,000 internal images across 900+ public repos from more than 300 organizations, including billing records and unreleased features.

• Over 13,000 internal images found in 900+ public repositories
• Leaks affected more than 300 organizations
• Screenshots included billing, treasury consoles and unreleased features
• Cause: CLI agents lack a sanctioned way to attach files