Ara
@arafatkatze · Jul 17, 2026
I gave xAI a lot of shit for Grok Build’s repo-upload behavior, so they deserve the same volume when they fix it.
I pulled the new signed release, planted fake secrets, and captured its HTTPS traffic with MITM proxies. The fix held as retention was off on first login and had no
Ara@arafatkatze· Jul 14, 2026Grok Build is straight up malware behavior with an Apple notarized signature.
You could explicitly deny the agent permission to read a file and it would upload that exact file anyway, because a separate code path silently packed your entire repo, full Git history included, and
Elon Musk
@elonmusk
❤️
03:10 AM · July 18, 2026 · 30.6K views
56
20
330