Developers at over 300 organizations customer data exposed after GitHub Glow breach
Data Leak
Summary
Hide ▲
Show ▼
A public GitHub exposure revealed 13,000+ internal images from developers at 300+ organizations, including customer billing records and unreleased feature screens. The files were posted under developers' personal accounts, making them downloadable outside company-controlled repositories. The leak spreads sensitive internal visuals across many organizations and raises the risk of further public circulation.
Related Happenings
Review gates for coding agents block public uploads and personal-account posting
Defensive Guidance
H score24
First: 30.09.2026 14:30
Last: 30.09.2026 14:30
Sources 1
How related:
Require a review step before an agent creates a public repository, pushes to a personal account or gist, or makes a private repository public.
About this happening:
Companies using coding agents were urged to add review gates and access controls before agents can create public repositories, post to personal accounts or gists, or m...
Review gates for coding agents block public uploads and personal-account posting
Defensive GuidanceHow related: Require a review step before an agent creates a public repository, pushes to a personal account or gist, or makes a private repository public.
About this happening: Companies using coding agents were urged to add review gates and access controls before agents can create public repositories, post to personal accounts or gists, or m...
TeamPCP supply-chain credential and data leak
Data Leak
H score59
First: 27.08.2026 16:31
Last: 27.08.2026 16:31
Sources 1
About this happening:
A TeamPCP-linked supply-chain leak exposed half a million credentials and at least 300GB of data, putting over a thousand organizations worldwide at risk of downstream...
TeamPCP supply-chain credential and data leak
Data LeakAbout this happening: A TeamPCP-linked supply-chain leak exposed half a million credentials and at least 300GB of data, putting over a thousand organizations worldwide at risk of downstream...
Miasma source code leak on GitHub
Data Leak
H score32
First: 10.06.2026 23:27
Last: 10.06.2026 23:27
Sources 1
About this happening:
The Miasma source code was briefly leaked on GitHub, exposing malware framework code that could be copied, studied, and modified by other threat actors. The exposure repor...
Miasma source code leak on GitHub
Data LeakAbout this happening: The Miasma source code was briefly leaked on GitHub, exposing malware framework code that could be copied, studied, and modified by other threat actors. The exposure repor...
Shai-Hulud public GitHub repository credential exposure
Data Leak
H score26
First: 18.05.2026 20:28
Last: 18.05.2026 20:28
Sources 1
About this happening:
Shai-Hulud stole developer credentials that were later exposed in public GitHub repositories, turning a theft phase into a public leak of access data. The exposed mate...
Shai-Hulud public GitHub repository credential exposure
Data LeakAbout this happening: Shai-Hulud stole developer credentials that were later exposed in public GitHub repositories, turning a theft phase into a public leak of access data. The exposed mate...
Anthropic Claude Code source code leak from NPM release
Data Leak
H score18
First: 01.04.2026 03:32
Last: 01.04.2026 03:32
Sources 1
About this happening:
Anthropic mistakenly exposed proprietary Claude Code source code through a NPM release, allowing the codebase to be reconstructed and spread online. The leak involved...
Anthropic Claude Code source code leak from NPM release
Data LeakAbout this happening: Anthropic mistakenly exposed proprietary Claude Code source code through a NPM release, allowing the codebase to be reconstructed and spread online. The leak involved...
Latest development: 02.04.2026 23:30
Threat actors are using fake GitHub repositories to exploit the Claude Code source code leak and lure users searching for leaked Claude Code into downloading a 7-Zip archive that launches ClaudeCode_x64.exe and drops Vidar and GhostSocks; Zscaler says the bogus repository is SEO-optimized for Google Search queries like “leaked Claude Code.”
Timeline
-
30.09.2026 14:30 2 articles · 1h ago
Developers at over 300 organizations customer data exposed after GitHub Glow breach
Initial DisclosureDevelopers asked AI coding agents to package screenshots for review, and the agents placed the files in public GitHub repositories under personal accounts. That first step exposed internal visuals outside company-controlled access.
Show sources
- AI Coding Agents Exposed 13,000 Internal Images, Including Billing Records, on GitHub — thehackernews.com — 30.09.2026 14:30
- AI Coding Agents Exposed 13,000 Internal Images, Including Billing Records, on GitHub — thehackernews.com — 30.09.2026 14:30