Commits to Private Repositories are visible to followers of a user

If you follow a User who is making a commit to a private repo the commit appears in your timeline. I just see that the repo exists, the commit message and the revision hash and I am not able to get further access but this should definitely be fixed.