gg2
ZCode GLM agent silently uploads Git history
The gist
A developer found ZCode silently uploading a 313MB encrypted archive of users' .git history.
The decryption key lives only in Z.ai's cloud, so users can't read it.
How it unfolded
- Sep 18, 2026Developer ferstar publishes a reverse-engineering walkthrough finding that ZCode, when logged in, silently packages the user's entire workspace — .git history, LFS asset cache, reflogs and global app configs — encrypts it and uploads it to Aliyun OSS.
- Sep 18, 2026ferstar's capture shows a 313MB encrypted archive built from a 345MB commercial workspace with 42,411 files, and 564 failed upload attempts logged during the investigation.
- Sep 18, 2026The post passes 276,000 views; FeiZ's Chinese-language alert thread draws another 63,800. A Hacker News submission and a Reddit r/LocalLLaMA post follow.