SpaceXAI's Grok coding tool was uploading users' full codebases

Researchers found that SpaceXAI's Grok Build CLI was packaging and uploading users' entire code repositories to Google Cloud, including files marked off-limits and secrets deleted from git history. SpaceXAI has since disabled the codebase-upload behavior.

Why it matters: A major AI coding tool was retaining far more user code and secrets than disclosed, well beyond comparable tools like Claude Code.