AI Coding App ZCode Found Silently Uploading Entire Git History

Researcher ferstar found that Zhipu's AI app ZCode packaged working directories into encrypted archives and uploaded them to Aliyun OSS without user consent. In one snapshot, 86.6% of the volume was the .git folder, including full commit history; the decryption key is stored only on Zhipu's servers. Zhipu confirmed the uploads and said the feature has been fixed.

• A 345 MB project snapshot compressed to 313 MB and was uploaded 564 times
• 86.6% of the snapshot was .git: 196 MB LFS and 102 MB commit objects
• AES-256-CTR key wrapped with RSA-OAEP is stored only on the server
• optimizeAgentExperienceEnabled and repoSnapshotIndexingEnabled do not disable uploads