Your AI Coding Tool Is Watching You. Alibaba Just Proved It.
On July 3, 2026, Alibaba issued an internal directive that should make every CISO on Earth reach for their AI tool inventory: effective July 10, Claude Code — Anthropic's AI coding agent used by millions of developers — was classified as 'high-risk software with security vulnerabilities' and banned company-wide. The reason? Security researchers discovered that Claude Code contained hidden code that secretly identified whether users were located in China, checked proxy connections to Chinese URLs, and flagged affiliations with Chinese AI research labs — then sent that intelligence back to Anthropic's servers through invisible system prompt modifications. This isn't a hypothetical supply chain attack. This is a major AI vendor embedding covert surveillance capabilities into a tool that has deep access to your local file system, your source code, and your development environment.
July 6, 2026