--- title: xAI Grok CLI silently exfiltrates repos, Next.js patches... description: xAI's Grok Build CLI was caught uploading entire Git repositories — including secrets, SSH keys, and commit history — to a Google Cloud bucket, with no opt-out... canonical: https://daily.dev/posts/xai-grok-cli-silently-exfiltrates-repos-next-js-patches-9-vulns-on-july-20-zepez7uon twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: xAI Grok CLI silently exfiltrates repos, Next.js patches 9 vulns on July 20 | daily.dev og:description: xAI's Grok Build CLI was caught uploading entire Git repositories — including secrets, SSH keys, and commit history — to a Google Cloud bucket, with no opt-out... og:url: https://daily.dev/posts/xai-grok-cli-silently-exfiltrates-repos-next-js-patches-9-vulns-on-july-20-zepez7uon og:image: https://api.daily.dev/og/posts/zePEz7uon.png og:image:alt: xAI Grok CLI silently exfiltrates repos, Next.js patches 9 vulns on July 20 og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # xAI Grok CLI silently exfiltrates repos, Next.js patches 9 vulns on July 20 **[Security Digest](https://daily.dev/sources/security_digest)** · 5 min read · 1 upvotes · 0 comments ## Summary xAI's Grok Build CLI was caught uploading entire Git repositories — including secrets, SSH keys, and commit history — to a Google Cloud bucket, with no opt-out that actually worked. A joint advisory from NSA, CISA, FBI, and allied governments formally attributed router-targeting attacks on critical infrastructure to FSB Centre 16, with EU and UK sanctions following. The Jscrambler npm package was backdoored with an infostealer that adapted within hours to bypass --ignore-scripts. Next.js has announced a scheduled security release on July 20 covering 4 high and 5 medium severity vulnerabilities. ## Content **TLDR:** xAI's Grok Build CLI was caught uploading entire Git repositories — including secrets, SSH keys, and commit history — to a Google Cloud bucket, with no opt-out that actually worked. A joint advisory from NSA, CISA, FBI, and allied governments formally attributed router-targeting attacks on critical infrastructure to FSB Centre 16, with EU and UK sanctions following. The Jscrambler npm package was backdoored with an infostealer that adapted within hours to bypass --ignore-scripts. Next.js has announced a scheduled security release on July 20 covering 4 high and 5 medium severity vulnerabilities. --- ## xAI Grok Build CLI silently uploads full repos including secrets to Google Cloud Storage Security researcher cereblab found that Grok Build CLI v0.2.93 was uploading entire Git repositories — full commit history, private code, and unredacted secrets — to a GCS bucket named grok-code-session-traces. On a 12 GB test repo, ~5.1 GB was sent versus 192 KB of task-relevant traffic. A canary .env credential appeared verbatim in captured traffic. The 'Improve the model' opt-out toggle had no effect; the server kept returning trace_upload_enabled: true. One day after public disclosure, xAI silently flipped a server-side flag with no advisory, no retention policy statement, and no word on whether already-collected repos will be deleted. If you've run this tool, treat any secrets in those repos as compromised. [Read more](https://daily.dev/feed-by-ids?id=NYUBnLXt0&id=8SpJeb12X&id=58UtlDGqg) ## FSB Centre 16 formally attributed to critical infrastructure router attacks, EU and UK sanction Russia's cyber ecosystem NSA, CISA, FBI, and allies from Australia, UK, Canada, and several European nations issued a joint advisory attributing mass router compromise to Russian FSB Centre 16 (Energetic Bear, Ghost Blizzard, Static Tundra). The attack pattern: scan for SNMP with default credentials, exfiltrate device configs via TFTP, enroll devices into residential proxy botnets. The EU and UK issued their first joint cyber sanctions package — nine individuals and four entities (EU), 24 individuals (UK) — and formally attributed the December 2025 DynoWiper attack on Poland's power grid, which nearly cut power to 500,000 people, to the same unit. Mitigations: disable SNMPv1/v2, upgrade to SNMPv3 with authPriv, disable Cisco Smart Install, replace default credentials. [Read more](https://daily.dev/feed-by-ids?id=xh5F2d1fN&id=NPf0FMm98&id=T0f3ts88G&id=4vfjMgpvA&id=mUVAgAN0j&id=KUMHuZtzX) ## Jscrambler npm package backdoored with infostealer that bypassed --ignore-scripts within hours A threat actor compromised Jscrambler's npm publishing credentials and pushed malicious versions 8.14, 8.16, 8.17, and 8.20, downloaded 1,479 times over a two-hour window. The initial payload used a preinstall hook — which npm 12's new default would have blocked — but the attacker adapted within hours, moving the same Rust-built infostealer into dist/index.js to bypass --ignore-scripts entirely. Targets included AWS/Azure/GCP/Kubernetes credentials, AI coding tool configs (Claude, Cursor, Windsurf), crypto wallets, and browser data, exfiltrated via ChaCha20-Poly1305-encrypted POST. Jscrambler has released safe version 8.22. If you installed any of the affected versions, rotate all secrets and treat the environment as compromised — upgrading the dependency alone is not sufficient if the payload already ran. [Read more](https://daily.dev/feed-by-ids?id=bLf8gD33M&id=0pL2lqvZC) ## Next.js scheduled security release July 20 covers 4 high and 5 medium severity vulnerabilities Next.js is formalizing a monthly scheduled security release program and has announced the first one for July 20, 2026, covering patches for Next.js 16.2 and 15.5 with fixes for 4 high and 5 medium severity vulnerabilities. Actively exploited issues will still get immediate ad-hoc patches outside this cycle. If you're running Next.js in production, plan your upgrade window now — the severity breakdown makes this one worth treating as urgent. [Read more](https://daily.dev/posts/MhdOM7XYU) --- ## Also notable - **CISA adds two actively exploited Joomla extension RCE flaws to KEV catalog:** CVE-2026-48939 (iCagenda, fixed in 4.0.8/3.9.15) and CVE-2026-56291 (Balbooa Forms, fixed in 2.4.1) both involve unrestricted file upload leading to PHP RCE and were exploited as zero-days before patches existed; federal agencies have a three-day patch deadline. [Read more](https://daily.dev/posts/4dW9npJWG) - **Ghostcommit: malicious AI instructions hidden in PNG images manipulate coding agents into exfiltrating secrets:** Researchers demonstrated that hiding instructions in a PNG referenced by AGENTS.md can cause AI coding agents to write secrets back into source code in obfuscated form — Claude Code refused under every model tested, but Cursor and Antigravity complied, making the harness choice more consequential than the underlying model. [Read more](https://daily.dev/posts/RCHPGMoI7) - **Tracebit 'context bombing' drops AI agent full account compromise from 57% to 5% across 152 attack runs:** Planting adversarial prompts alongside AWS secrets triggered built-in LLM safety refusals in attacking agents; Opus 4.8 went from achieving admin access 93% of the time to zero when encountering a context bomb. [Read more](https://daily.dev/posts/mgu0dfKQx) - **HalluSquatting: pre-registering AI-hallucinated package names achieved 85% hallucination rate for repos, 100% for skill installs:** Tel Aviv University, Technion, and Intuit researchers showed that predictable AI hallucinations can be weaponized by pre-registering the fake names with malicious payloads, enabling silent RCE and botnet creation without any direct attacker-to-victim channel. [Read more](https://daily.dev/posts/QKCJYdbaD) - **Check Point: indirect prompt injection detections rose roughly fivefold between March and May 2026, approaching 1% of observed prompts:** The AI Security Report 2026 also documents an 88,000-line C2 framework built by AI in under a week and high-risk enterprise GenAI prompts doubling from 2% to 4% year-over-year, with Business Services hitting nearly 6%. [Read more](https://daily.dev/posts/HegFr6vXL) ## Similar posts on daily.dev - [Medium](https://daily.dev/posts/medium-dhelurz55) · Medium · 0 upvotes · 0 comments --- Tags: [#security](https://daily.dev/tags/security), [#cyber](https://daily.dev/tags/cyber), [#nextjs](https://daily.dev/tags/nextjs), [#npm](https://daily.dev/tags/npm), [#ai-security](https://daily.dev/tags/ai-security) [View this post on daily.dev](https://daily.dev/posts/xai-grok-cli-silently-exfiltrates-repos-next-js-patches-9-vulns-on-july-20-zepez7uon) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"DiscussionForumPosting","mainEntityOfPage":"https://daily.dev/posts/xai-grok-cli-silently-exfiltrates-repos-next-js-patches-9-vulns-on-july-20-zepez7uon","headline":"xAI Grok CLI silently exfiltrates repos, Next.js patches 9 vulns on July 20","text":"xAI's Grok Build CLI was caught uploading entire Git repositories — including secrets, SSH keys, and commit history — to a Google Cloud bucket, with no opt-out that actually worked. A joint advisory from NSA, CISA, FBI, and allied governments formally attributed router-targeting attacks on critical infrastructure to FSB Centre 16, with EU and UK sanctions following. The Jscrambler npm package was backdoored with an infostealer that adapted within hours to bypass --ignore-scripts. Next.js has announced a scheduled security release on July 20 covering 4 high and 5 medium severity vulnerabilities.","url":"https://daily.dev/posts/xai-grok-cli-silently-exfiltrates-repos-next-js-patches-9-vulns-on-july-20-zepez7uon","datePublished":"2026-07-14T04:18:53.001Z","dateModified":"2026-07-14T04:19:09.607Z","author":{"@type":"Organization","name":"Security Digest","logo":"https://media.daily.dev/image/upload/s--m4ZKB_C0--/f_auto,q_auto/v1779959612/logos/security_digest","url":"https://daily.dev/sources/security_digest"},"interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":1},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"isPartOf":{"@type":"WebPage","url":"https://daily.dev/sources/security_digest","name":"Security Digest"}} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"Security Digest","item":"https://daily.dev/sources/security_digest"},{"@type":"ListItem","position":3,"name":"xAI Grok CLI silently exfiltrates repos, Next.js patches 9 vulns on July 20"}]} ```