ZCode, the GLM coding agent, silently uploads your Git history
Z.ai's ZCode coding agent silently uploads users' full Git history and workspace archives to Aliyun OSS; settings toggles do not stop it.
Researcher ferstar reverse-engineered ZCode, Z.ai's desktop coding agent for its GLM models, and found it packages the entire workspace, including complete .git history, LFS caches, and configs, into an encrypted archive uploaded to Aliyun OSS whenever the app is logged in. The archive uses envelope encryption with a server-delivered RSA-OAEP public key, so users cannot decrypt their own 313MB capture from a 345MB, 42,411-file workspace. Settings toggles only control training authorization and server-side indexing, while a host-level capture sidecar runs unconditionally before every prompt. The disclosure drew over 276,000 views, highlighting that the open GLM weights do not make the closed-source harness trustworthy.