AI Coding Incident Tracker

Z.ai Removes ZCode Features After Full-Repository Upload Risk

Z.ai Removes ZCode Features After Full-Repository Upload Risk

Reporting documents ZCode's default-enabled Repository Index capturing complete repositories, Git histories, LFS data, reflogs, and potentially deleted or encrypted secrets. A 313MB archive and repeated upload attempts were reported, while a successful 15KB transfer is the clearest evidence of actual transmission; Z.ai removed Repo Wiki, deleted stored data, commissioned assessments, apologized, and open-sourced ZCode. Retention, historical exposure, and customer impact remain independently unverified.

Sources (2)
Updated Sep 24, 2026