According to CoinMeta, the Zhipu AI programming tool ZCode is alleged to take snapshots of the entire project in the background, packaging and encrypting them along with . git, and then uploading them to Alibaba Cloud OSS. A technical blog author Ferstar who reverse-engineered the client found that this mechanism runs as long as the user is logged in, and there is no option to turn off the upload in the interface. The author discovered a snapshot of a commercial project that was approximately 313MB in size, containing 42,000 files, among which . git accounted for 86.6%, including git historical objects, LFS large file caches, and reflog. In other words, not only the current code is packaged, but also old submissions, previously downloaded large files, and local branch operations may be included as well. This snapshot failed to upload 564 times and remained locally waiting to be retried. ZCode's official privacy policy currently only states that it will collect text, files, and code "submitted during conversations" by users, without explicitly mentioning the entire repository and git history. The official "optimization plan" is set to off by default, but it only controls whether the data is used for model training. Ferstar claims that turning off this option will not stop the snapshot packaging and uploading process.