Huo Xing Cai Jing reports that after a developer deconstructed the official MiMo Code installation package from Xiaomi, they discovered two modules not present in the public repository: trajectory-bundle and codebase-bundle. The former can package system prompts, conversations, model responses, and code diffs; the latter includes collectCodebase(), which can traverse a Git repository, read source code, and compress it into a bundle. Currently, there is no evidence that collectCodebase() is invoked by MiMo Code’s internal code or that the full codebase has been uploaded. The externally transmitted information confirmed by the developer primarily consists of Git repository URLs, commit hashes, and branch names. Xiaomi MiMo Code was open-sourced under the MIT license in June. Two days ago, Zhipu’s ZCode was issued a 12-page legal notice by a company demanding deletion of data due to its automatic bundling of entire workspaces.
Xiaomi MiMo Code Installer Found to Contain Unpublished Bundles
MarsBitShare
Summary
The official installer of Xiaomi MiMo Code was found to contain two unpublished modules—trajectory-bundle and codebase-bundle—after developers decompiled the software. The trajectory-bundle packages prompts, dialogues, and code diffs, while the codebase-bundle’s collectCodebase() function can traverse and compress Git repositories. No evidence indicates the function has been used, and no full codebase upload has been confirmed. Git repository addresses, commit hashes, and branches were discovered externally. MiMo Code was open-sourced in June under the MIT license. Zhipu’s ZCode faced a legal challenge just two days prior. These developments occur amid heightened scrutiny of CFT (Countering the Financing of Terrorism) and data security in liquidity and crypto markets.
Source:Show original
Disclaimer: The information on this page may have been obtained from third parties and does not necessarily reflect the views or opinions of KuCoin. This content is provided for general informational purposes only, without any representation or warranty of any kind, nor shall it be construed as financial or investment advice. KuCoin shall not be liable for any errors or omissions, or for any outcomes resulting from the use of this information.
Investments in digital assets can be risky. Please carefully evaluate the risks of a product and your risk tolerance based on your own financial circumstances. For more information, please refer to our Terms of Use and Risk Disclosure.