ZCode was allegedly caught uploading workspace/.git records to the cloud.
Summary
ZCode is allegedly accused of silently uploading workspace .git records to the cloud, raising privacy and security concerns for developers.
Similar Articles
Inside ZCode: Silently uploading your Git history to the cloud
An investigation reveals that ZCode, Zhipu's AI coding desktop app, silently uploads users' entire Git workspace history to Aliyun OSS, encrypted with server-controlled keys, raising significant privacy concerns.
ZCode, the GLM coding agent, silently uploads your Git history
ZCode, a GLM-based coding agent, silently uploads users' Git history, raising concerns about privacy and security in AI development tools.
@fankaishuoai: Zcode pulled a massive one—fully packaged and uploaded the user's entire project directory, including the .git director…
An incident where the Zcode AI agent uploaded a user's entire project directory, including .git, raising privacy concerns. The author criticizes closed-source agents and recommends open-source alternatives.
ZCode is now open source
ZCode has been open-sourced on GitHub following the remediation of security issues, with the source code now available for community scrutiny and security assessments by CAICT and NSFOCUS confirming data remediation.
SpaceXAI’s Grok programming tool was uploading its users’ entire codebase to cloud storage
SpaceXAI's Grok Build AI coding tool was found uploading users' entire codebases to cloud storage, including files it was told to ignore and deleted secrets. The company has disabled the feature and promises to delete uploaded data.