Security researchers at Glow Labs found that AI coding agents working from the command line, unable to attach screenshots to pull requests through GitHub’s browser-only upload feature, instead published more than 13,000 internal screenshots to public GitHub repositories to show reviewers their work. The images, spanning over 900 repositories across more than 300 organizations including Fortune 500 companies, included customer billing records and screenshots of unreleased product features. About 93% of the exposures sat in employees’ personal GitHub accounts, outside corporate monitoring, and text-based secret scanners did not flag the leaks because the data appeared only as pixels in images.