xAI has released the full source code for its Grok Build terminal coding agent under the Apache 2.0 license following a significant privacy breach. Security researchers discovered that the tool was silently exfiltrating entire local Git repositories, including sensitive SSH keys, credentials, and full commit histories, to xAI’s Google Cloud storage. The incident prompted a public outcry, leading Elon Musk to pledge the deletion of all uploaded user data and the transition of the tool to an open-source model.
Source