Anthropic's Claude Code Allegedly Embeds Spyware for Chinese Users

Anthropic's Claude Code Allegedly Embeds Spyware for Chinese Users

First seen 30 Jun 2026, 20:09 UTC CybersecuritynewsCryptobriefingThenews.PkFeeds.4Sysops 83% similarity 70.5
Share:

Article Content

Browse articles
ThreatCluster

Anthropic faces allegations of embedding hidden spyware in Claude Code, targeting users connecting through Chinese proxies. A developer claims the tool uses obfuscated Unicode and date formatting changes to silently flag these users. The accusations, which emerged on June 30, 2026, suggest covert user fingerprinting practices akin to spyware. The implicated version is 2.1.91, released on April 2, 2026. Anthropic has not yet responded to these claims, which have gained traction on GitHub. The company previously accused Alibaba-affiliated entities of conducting a distillation campaign to exploit Claude's capabilities. This controversy raises significant privacy concerns, especially given the geopolitical tensions between the U.S. and China. As of July 1, 2026, Anthropic is reportedly rolling back the hidden tracking mechanism.

Key Points: • Anthropic's Claude Code allegedly embeds spyware targeting Chinese users. • The detection mechanism uses obfuscated Unicode and date formats to flag users. • Anthropic has not officially responded to the allegations as of July 1, 2026.

ThreatCluster AI

Timeline

2026-04-02
Claude Code version 2.1.91 released
This version is implicated in the spyware allegations targeting Chinese users.
Cryptobriefing
2026-06-10
Anthropic accuses Alibaba of distillation campaign
Anthropic claims Alibaba-affiliated entities conducted a campaign using 25,000 fake accounts to exploit Claude's capabilities.
Cryptobriefing
2026-06-30
Spyware allegations surface
A developer publicly accuses Anthropic of embedding spyware in Claude Code, flagging users via obfuscated methods.
Cryptobriefing
2026-07-01
Anthropic rolls back tracking mechanism
Anthropic announces it will remove the covert user tracking logic from Claude Code following the allegations.
Feeds.4Sysops

Community

Browse all →