Coding agents leaked 13,000 internal screenshots to public GitHub repos

Glow Labs found over 13,000 internal images in 900+ public GitHub repositories tied to developers at more than 300 organizations. Coding agents published screenshots under personal accounts because gh could not attach images to PRs until version 2.99.0 shipped on September 1, 2026.

• 13,000+ internal images found in 900+ public GitHub repositories
• Developers at more than 300 organizations were affected
• In 93% of cases images sat in repos under employees' personal accounts
• gh 2.99.0 added the --attach flag only on September 1, 2026