Xiaomi MiMo Code Found to Include Closed-Source Modules

iconKuCoinFlash
Share
AI summary iconSummary
Xiaomi’s MiMo Code includes two closed-source modules, `trajectory-bundle` and `codebase-bundle`, not present in public repositories. The `collectCodebase()` function in `codebase-bundle` can traverse Git repositories, read code, and compress it. There is no evidence indicating that it is currently active or that the full codebase has been uploaded. External data includes Git addresses, commit hashes, and branch information. On-chain data analysis reveals no direct connection to hash function usage in the leaked modules.

According to ME News, on September 22 (UTC+8), Beating AI reported that a developer who deconstructed the official MiMo Code installation package discovered two modules not present in any public repositories: `trajectory-bundle` and `codebase-bundle`. The former can package system prompts, conversations, model responses, and code diffs. The latter contains `collectCodebase()`, which can traverse a Git repository, read source code, and compress it into a bundle. Currently, there is no evidence that `collectCodebase()` is invoked by MiMo Code’s internal code or that the full codebase has been uploaded. The externally transmitted information confirmed by the developer primarily consists of Git repository URLs, commit hashes, and branch names. (Source: BlockBeats)

Disclaimer: The information on this page may have been obtained from third parties and does not necessarily reflect the views or opinions of KuCoin. This content is provided for general informational purposes only, without any representation or warranty of any kind, nor shall it be construed as financial or investment advice. KuCoin shall not be liable for any errors or omissions, or for any outcomes resulting from the use of this information. Investments in digital assets can be risky. Please carefully evaluate the risks of a product and your risk tolerance based on your own financial circumstances. For more information, please refer to our Terms of Use and Risk Disclosure.