Zhipu AI's ZCode Exposed for Full Repository Upload via Backend, Even Git History Not Spared
2026.09.18 15:14:49
Insight Beating AI Flash News: Zhipu AI’s programming tool ZCode has been exposed to secretly take full project snapshots in the background, encrypting and packaging even .git directories before uploading them to Alibaba Cloud OSS. Tech blogger ferstar, after reverse-engineering the client, confirmed this mechanism runs as long as the user is logged in, with no toggle in the interface to disable the upload. A commercial project snapshot found by the author is approximately 313MB, containing 42,000 files in its manifest. The .git directory accounts for 86.6% of the total size, including Git history objects, Git LFS large file caches, and reflogs. This means the packaged data includes not only the current code, but also old commits, previously downloaded large files, and local branch operations. The snapshot failed to upload 564 times and remained locally pending retries. ZCode’s official privacy policy currently only explicitly states it collects text, files, and code "submitted in conversations", with no clear mention of entire repositories or Git histories. The official "Optimization Plan" is disabled by default, but it only controls whether the data is used for model training; ferstar noted that disabling this option does not halt snapshot packaging and uploads.
US optical module and storage stocks fall in pre-market trading.
26 minutes ago
DeFi yield protocol infiniFi unveils INFI token economic model, with 45% allocated to the ecosystem.
26 minutes ago
US crypto-related stocks rose slightly in pre-market trading.
26 minutes ago
Liquid AI upgrades its 24B-parameter local model: only 2B parameters are activated, and it outperforms the larger Qwen model in agent tests.
26 minutes ago
Binance: Users with at least 245 points can claim the Alpha airdrop at 18:00 today.
26 minutes ago
TRUMP team's allocated address transfers 6.136 million TRUMP tokens to a new address.
26 minutes ago
Hot feeds
A trader profits $448K by monitoring #Binance's new listings!
2024.12.13 17:37:29
Last week, funds have flowed into #Bitcoin, #Ethereum, and #Hyperliquid.
2024.12.16 14:48:36
A $PEPE whale that had been dormant for 600 days transferred all 2.1T $PEPE($52M) to a new address.
2024.12.14 10:35:27
When Elon Musk tweeted about Moltbook, the meme coin MOLT experienced a short-term 30% price surge, hitting a new all-time high of $114 million.
2026.01.31 18:37:29
A smart #AI coin trader made $17.6M on $GOAT, $ai16z, $Fartcoin,$arc.
2025.01.05 16:05:18
A sniper earned 2,277 $ETH ($8.3M) trading $SHIRO within 18 hours!
2024.12.03 23:09:08
MoreHot Articles

How did I turn $1,000 into $30,000 with smart money?
2024.12.09

10 promising AI Agent cryptos
2024.12.05

The 30-Year-Old Entrepreneur Behind Virtual, a Multi-Million Dollar AI Agent Society
2025.01.22

10 smart traders specializing in MEMEcoin trading on Solana
2024.12.09

A trader lost $73.9K trading memecoins in just 3 minutes — a lesson for us all!
2024.12.13

What is $SPORE? Let us take you through the on-chain records to show you how it works.
2024.12.25

