SpaceXAI’s Grok programming tool was uploading its users’ entire codebase to cloud storage
TL;DR
SpaceXAI's Grok Build AI coding tool was spotted uploading users' entire codebases to Google Cloud before it was reported, and the company turned it off. The Register reports that Cereblab published findings on Monday showing how the Grok Build CLI was packaging and uploading entire code repositories, "including files it was told not to open and secrets deleted from history," significantly more data retention than similar tools like Claude Code.
Nauti's Take
Before any team runs a tool like this on a real repo, they need a concrete answer on what gets bundled, where it is sent, and whether old secrets are truly excluded. If you cannot verify that locally, keep it confined to isolated test projects and leave production repositories out for now.
Sources