ZCode Open-Sourced Following Security Concerns and Alleged Defamation on Xiaohongshu

icon MarsBit
Share
AI summary iconSummary
ZCode was open-sourced following a security breach reported by users over data upload issues. Tang Jie of Zhipu AI filed a complaint against a Xiaohongshu post for alleged defamation, which falsely implicated him in code theft claims using AI-generated images. On-chain news revealed that Taiyuan Chengming accused ZCode of unauthorized data use. Zhipu apologized and resolved the issue, attributing it to a default indexing feature. The company pledged to establish a routine product security mechanism.

HuoXing Finance reports that on September 21, internet user "Zhang Kangkang kk" disclosed on a social platform that Tang Jie, founder of Zhipu and professor at Tsinghua University, filed a complaint via Xiaohongshu against a user post. The complaint stated that the post falsely claimed Zhipu’s ZCode engaged in code theft and plagiarism by using statements such as “code and copy are pretty much the same—both start with ‘C’ and steal code,” without factual basis. It further associated Tang Jie with these allegations through derogatory nicknames like “Uncle Tang,” damaging his personal reputation, while using AI technology to synthesize Tang Jie’s likeness with anime imagery and place it in a defamatory context. The complainant argued that the content constituted malicious defamation and commercial disparagement, harming both Tang Jie’s personal reputation and Zhipu AI’s brand, and requested the platform remove the post and take action against the user. On the same day, Zhipu announced that it had addressed security concerns regarding its standalone AI coding client, ZCode, in response to community feedback, and issued an apology to all users. The company has open-sourced ZCode’s code for community oversight and will establish a routine mechanism for identifying and resolving product security vulnerabilities. Previously, developers discovered that ZCode silently uploaded users’ local repository data without prior notification. On September 18, Zhipu had publicly apologized and urgently patched the issue, explaining that the root cause was a “codebase indexing” feature enabled by default with no option to disable it. On September 20, Taiyuan Chengming Technology Co., Ltd. sent Zhipu a formal letter accusing ZCode of unauthorized uploading of the company’s data assets and trade secrets, asserting its rights to seek redress and reserving the right to pursue legal action.

Disclaimer: The information on this page may have been obtained from third parties and does not necessarily reflect the views or opinions of KuCoin. This content is provided for general informational purposes only, without any representation or warranty of any kind, nor shall it be construed as financial or investment advice. KuCoin shall not be liable for any errors or omissions, or for any outcomes resulting from the use of this information. Investments in digital assets can be risky. Please carefully evaluate the risks of a product and your risk tolerance based on your own financial circumstances. For more information, please refer to our Terms of Use and Risk Disclosure.