Unverified50% confidenceFactExact time
The ZCode v3.14.0 client has completed security remediation, the Repo Wiki feature has been removed, and the workflow that generates and uploads local repository snapshots has been disabled.
1
Sources
50%
Confidence
Medium-term (~90 days)
Relevance
9/21/2026
First Seen
Valid until: 12/20/2026
Sources
Related Entities
Related Claims
UnverifiedZCode officially acknowledged security vulnerabilities in the product and apologized to users, with the open-source action stemming from security issues exposed by the community.66% similarUnverifiedQwen3.8-27B reverse-engineered the qProtect protector to extract the C2 server domain names used by the malware.60% similarUnverifiedZDR requires that data be securely erased after processing in memory, with no recoverable data fragments remaining in temporary caches, log pipelines, or monitoring systems.58% similarUnverifiedThe XZ Utils attacker built trust over multiple years to ultimately gain project maintainer privileges and insert malicious code.56% similarVerifiedSharedArrayBuffer was temporarily disabled by browsers after the Spectre vulnerability was disclosed in 2018, and was restored starting in 2020 via cross-origin isolation; multi-threaded mode requires server response headers to include Cross-Origin-Opener-Policy and Cross-Origin-Embedder-Policy.55% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/938152API
curl https://kongchang.com/api/v1/knowledge/claims/938152MCP
get_claim(id=938152)