ZCode, a coding agent powered by GLM, automatically uploads users' Git history to remote servers without explicit permission. The discovery has raised privacy concerns among developers.
Security researchers identified that ZCode transmits Git repository data during operation, creating potential exposure of proprietary code, commit messages, and development history.
The agent collects this information silently in the background, with limited user visibility into what data is being transferred or where it's stored. Developers using ZCode may unknowingly share sensitive project details, including private commits and organizational code patterns.
The practice highlights broader concerns about AI coding assistants and data collection. Users typically grant broad permissions to development tools without understanding the full scope of data access.
ZCode joins other coding AI tools facing scrutiny over data handling practices. The discovery has sparked discussion on Hacker News, with 40 comments and 174 points, indicating significant community interest in the privacy implications.
Developers using ZCode should review their privacy settings and consider the risks of deploying such tools in environments with sensitive or proprietary code.
An 18-year-old Swedish teenager known as Chai has been sentenced to over 10 years in prison for attempted murder, rape, and aggravated assault committed online against victims in Germany and Australia.
Attackers are running a malware campaign using fake GitHub repositories impersonating LastPass and other software vendors to distribute Rapuncel, a newly discovered information stealer.
Image-sharing platform Gyazo confirmed a data breach after attackers exploited a server vulnerability to steal 23.6 million user records. The company has launched an investigation into the incident.
A liquefied natural gas tanker transporting US fuel to Europe experienced a systems failure that crew members suspect was a cyberattack. The incident marks a significant security concern for critical energy infrastructure.