ZCode, the GLM coding agent, silently uploads your Git history
Developer ferstar's reverse engineering found that Z.ai's ZCode silently packages the user's entire workspace, including .git history and LFS caches, encrypts it and uploads it to Aliyun OSS when logged in. A 313MB encrypted archive with 42,411 files was captured; ZCode is not open source, sparking trust concerns.