xAI's command-line tool "Grok Build" silently uploaded entire directories to Google Cloud servers, including SSH keys and password databases. After the backlash, Elon Musk promised to delete all uploaded user data, and xAI open-sourced the full 844,530-line Rust codebase under the Apache 2.0 license.

xAI's Grok Build CLI was caught silently uploading entire Git repositories, secrets, and .env files to Google Cloud Storage without user consent or

Security researchers found that SpaceXAI's Grok Build uploaded entire Git repositories including private code, commit histories, and API keys to Google Cloud.