ZCode, the GLM Coding Agent, Silently Uploads Your Git History
cdnsteve · hn · 2026-09-18
A trending Hacker News post reports that ZCode, the GLM coding agent from Zhipu, silently uploads users' local Git commit history without clear consent. The accompanying guide details how the behavior was discovered and why it matters: Git histories often contain internal code, secrets, and customer data, posing real leakage risk for enterprise users. It serves as a caution to audit what data AI coding agents transmit before adopting them.
More from coding & agent
- Anthropic's Head of Product Drops a 28-Minute Masterclass on Agents in Production — ifioknkem · 2026-09-20
- Teknium: Jev can't compact context well — Hermes summarizes 95% of it away — Teknium · 2026-09-20
- HarnessRouter open-sources a unified API to run Codex, Claude Code and more as agent backends — daniel_mac8 · 2026-09-20
- HarnessRouter: routing agent harnesses instead of models, a fresh infra idea — daniel_mac8 · 2026-09-20
- MCP tool naming: short generic verbs vs explicit prefixes for LLM tool selection — skvark · 2026-09-20
- GameToMac launched 10 days ago and already runs AoE IV, CS2 and Diablo IV on Apple Silicon — nickbaumann_ · 2026-09-20