The AI coding tool ZCode, from China’s Zhipu, was caught silently uploading users’ full Git history, according to the outlet OSCHINA.

The practice was flagged by researchers, and the company did not respond in the available material.