SpaceXAI’s Grok Build AI coding tool was spotted uploading users’ entire code repositories to Google Cloud before it was reported, and the company turned it off.
SpaceXAI’s Grok Build AI coding tool was discovered uploading entire user code repositories to Google Cloud storage, prompting the company to disable the feature after the issue came to light.
What happened
According to reports, the Grok Build tool automatically synced the full contents of a developer’s local project directory to a Google Cloud bucket without explicit user consent. The uploads included source files, configuration files, and other assets that made up the complete codebase.
The behavior was observed by multiple developers who noticed unexpected network traffic and large data transfers originating from the Grok extension while working on their projects.
Company response
SpaceXAI acknowledged the issue in a brief statement, confirming that the automatic upload feature was unintentionally enabled. The company said it has now disabled the functionality and is conducting an internal review to prevent similar incidents.
The firm also assured users that no data was accessed or used for training models beyond the temporary storage, and that any uploaded files would be deleted from the cloud storage promptly.
Potential implications for developers
Unintended code uploads raise concerns about intellectual property protection, especially for proprietary or confidential projects. Developers relying on AI assistance tools are urged to review permissions and network activity of such extensions.
- Check extension settings for data sync options
- Monitor outbound traffic from development environments
- Use isolated environments for sensitive code
- Read privacy policies of AI coding tools
Security experts recommend that developers treat AI coding assistants like any other third‑party software, ensuring they understand what data is collected and where it is stored.
“When you hand over your entire codebase, you’re essentially giving a third party a snapshot of your intellectual property.”
For more details, see the original coverage: Read the report.