xAI's Grok Build Uploaded Entire Git Repositories Without Permission
The Neuron ● Covered by 3 sources
xAI's Grok Build feature uploaded complete Git repositories to xAI's servers without developer consent, including files in .gitignore and unredacted credentials from environment files. The uploads contained full commit histories and API keys that developers had explicitly marked as private. xAI disabled the feature and committed to deleting all uploaded repositories.
Why it matters
A security researcher discovered that Grok Build was quietly uploading developers' entire Git repositories to xAI's cloud, including files explicitly marked as off-limits, full commit history, and unredacted API keys from .env files. xAI disabled the feature and promised all uploaded repos would be deleted.
