🚨 Stop using ZCode on your Mac until you read this.
I've had ZCode open on my Mac pretty much all day for a while now. It's a nice app, and Zhipu gives away a lot of free tokens, so it was easy to like.
But someone when reverse engineering the desktop client, found out that while you're logged in it packages your whole repo, including the full .git history, encrypts it so only the server can open it, and uploads it to storage on Alibaba Cloud. Turning off the privacy toggles didn't stop it.
@Zai_org says this came from its Repo Wiki indexer, that the data was deleted after use, and that it's fixed now.
I guess there's no free lunch. With all the code they've collected, I at least hope we get open source AGI out of it soon...
Full reverse engineering report 👇