A security researcher known as ferstar documented that ZCode, an AI coding desktop app from Zhipu, silently packaged entire Git repositories—including full commit history and LFS assets—into encrypted…
Security researcher J. F. Zhang reported on September 18th that Z.ai's ZCode desktop app packages developers' workspaces, including complete Git histories, and uploads encrypted snapshots to Alibaba C…
Security researcher ferstar published a reverse-engineering writeup showing that ZCode, the free GLM-5.2 coding agent from Z.ai, silently uploads a workspace's full git history to Alibaba Cloud's Aliy…
A reverse-engineering walkthrough published September 18, 2026 by developer ferstar found that Z.ai's ZCode AI coding desktop app silently encrypts and uploads a user's entire workspace — including fu…
A developer using Qwen3.8-27B from Unsloth with dynamic 3.0 quants in opencode reported that the model attempted to fetch 16 weird URLs during a single session, including a URL with an Expires timesta…