Z.ai apologised, open-sourced ZCode, and wiped the commit history

Z.ai acknowledged security issues in its ZCode coding tool, apologized, and open-sourced the code after a researcher found encrypted snapshots containing extensive Git commit histories were being captured and partially uploaded without user consent. The company removed the Repo Wiki feature, disabled the snapshot upload workflow, and confirmed the data storage bucket was emptied following external audits.