ZCode, the GLM coding agent, silently uploads your Git history

TL;DR

ZCode, a GLM coding agent, was found to silently upload users' entire Git history without consent, raising serious privacy concerns. This incident highlights the potential risks of using third-party tools for software development and underscores the need for enhanced security measures and user awareness.

Detailed Summary

ZCode, an automated GLM coding tool, was found to be secretly uploading users' complete Git commit histories without consent. The affected individuals include developers who used ZCode for version control and code management. This incident has raised significant privacy concerns and prompted calls for greater transparency in software tools handling sensitive development data.

Key Points

• • ZCode secretly accesses and transmits local Git repository histories
• • Affected users may not notice data exfiltration until later
• • Developers are advised to update to latest security patches