The MiMo Code installation package was found to contain undisclosed packaged modules

Developers discovered that after deconstructing the official installation package of Xiaomi MiMo Code, it contains two modules, trajectory-bundle and codebase-bundle, which are not available in the public repository. The former can package system prompts, dialogues, model responses, and code diffs; the latter includes collectCodebase(), which can traverse Git repositories, read source code, and compress packages.

Currently, there is no evidence that collectCodebase() is called by the built-in code of MiMo Code, nor is there any evidence showing that the complete codebase has been uploaded. The external content confirmed by developers mainly includes information such as Git repository addresses, commit hashes, and branches. Xiaomi MiMo Code was open-sourced under the MIT license in June.

Two days ago, ZhiPu ZCode faced a 12-page legal letter from a company demanding the deletion of data due to automatic packaging of the complete workspace.