ZCode silently uploaded full Git histories; Z.ai says Repo Wiki fixed
A reverse-engineering write-up says Zhipu’s ZCode client packaged entire workspaces—including full .git history—and uploaded encrypted snapshots to Aliyun OSS while logged in, with no effective UI opt-out. Z.ai apologized, blamed default Repo Wiki/indexing, said the issue is fixed, and promised to open-source the client.