ZCode silently uploaded users’ Git repositories, history, and files to the cloud

According to the source, an earlier ZCode version packaged logged-in users’ workspaces—including complete Git history, the LFS asset cache, reflogs, and application configurations—and uploaded them in encrypted form to Aliyun OSS. Z.ai later stated that the feature was enabled by default during the early launch period, affected some users, and had been fixed.