China's vulnerability database flags a "backdoor" in Claude Code
AFP reports that on July 8 China's National Vulnerability Database (NVDB) issued a warning about a "backdoor" in versions of Claude Code. Per the platform, it can transmit confidential data to Anthropic's servers without user consent, including location and personal identifiers.
NVDB called the risk a "serious threat" and told users to run an immediate full audit, delete the tool, or upgrade to a secure version. Anthropic didn't respond to AFP's request for comment.
Claude Code engineer Thariq Shihipar wrote on X that this was an experiment launched in March to target unauthorized resellers and distillation. People familiar with the situation say Alibaba told employees Claude Code is banned as of July 10.
Related stories
- A UK front company sourced 1,000+ Claude accounts a month
- Anthropic says Moonshot's Kimi K3 was distilled from Claude
- Hidden China tracker pulled from Claude Code after exposé
- Claude flagged a diary entry and a human sent it to police
- OpenAI, Google and Anthropic draft a standards body, SAFA
- Insiders say Anthropic oversold the rogue AI scare
Comments
No comments yet. Be the first.
Join the conversation
Sign in with Google to leave a comment. Your name and avatar come from your Google profile, and the comment appears after moderation.