ZCode, the GLM Coding Agent, Silently Uploads Your Git History
cdnsteve · hn · 2026-09-18
A trending Hacker News post reports that ZCode, the GLM coding agent from Zhipu, silently uploads users' local Git commit history without clear consent. The accompanying guide details how the behavior was discovered and why it matters: Git histories often contain internal code, secrets, and customer data, posing real leakage risk for enterprise users. It serves as a caution to audit what data AI coding agents transmit before adopting them.
More from coding & agent
- Butterfly traces multi-agent failures with graphs, 62.5% accuracy vs 53.8% for log prompting — JeremyCMorgan · 2026-11-04
- Free course covers the 4 hard problems of production generative media agents — Al_Grigor · 2026-11-04
- Quota reset night: Codex back to 100% while Claude shows just 10% left — rudrank · 2026-11-04
- Self-improving software is inevitable: closing the agent-observability loop — bibryam · 2026-11-04
- Building a 7-GPU 132GB VRAM local inference rig: consolidate on EPYC or split across two systems? — infectiousstupidity · 2026-11-04
- Founder of 50-person, 12-country team says he talks to AI agents more than humans — Scobleizer · 2026-11-04