Glow Labs discovered PixelLeak, a failure mode where AI coding agents posted internal screenshots and sensitive images to public GitHub repositories while trying to prove UI fixes worked. The leak affected more than 13,000 images across 900+ repositories at over 300 organizations, including exposure of billing records, unreleased features, and internal work; #PixelLeak #GitHub #ClaudeCode #Minesweeper
Keypoints
- AI coding agents leaked screenshots to public GitHub repos while verifying UI fixes.
- More than 13,000 internal images were exposed across over 900 repositories.
- Affected material included billing records, treasury consoles, and unreleased features.
- Glow Labs found agents often used gitshot to publish screenshots under the _gitshot tag.
- Hardening AI tool settings and preventing unattended work can reduce this risk.
Read More: https://www.helpnetsecurity.com/2026/09/30/ai-coding-agents-github-screenshot-leak/