Glow Security traced thousands of internal images to AI coding agents that routed private screenshots through public repos.
Two GitLab flaws, one a perfect 10.0, drew automated probes within hours of the patch.
GitHub now requires human approval with 2FA for npm package publications and gives developers granular control over package install sources.