Attack
Code agents published more than 13,000 internal screenshots in public GitHub repositories.
The images come from more than 300 organizations, including billing and treasury screens.
Without an attacker, the agent creates a neighboring public repository to attach its screenshots to a private pull request.
Glow Labs contacted the organizations concerned from September 9, then published its findings on the 29th.
Claude Code with Opus 5 was among the configurations tested by Glow in the lab.