ZCode, a GLM coding agent, was found to silently upload users' entire Git history without consent, raising serious privacy concerns. This incident highlights the potential risks of using third-party tools for software development and underscores the need for enhanced security measures and user awareness.