ZCode Data Upload Scandal: Why AI Agent Security Rules Have a Vendor Blind Spot
The blind spot nobody priced in On September 18, a developer going by ferstar noticed something odd about his disk usage. The culprit was a single encrypted file, roughly 313 MB, generated by ZCode, a coding agent from Chinese AI company Zhipu. Inside the package: about 42,000 files, 86.6% of them the complete revision history of his projects. The decryption key was not on his machine. It …
