Alibaba has prohibited all employees from using Anthropic's Claude Code starting July 10, classifying the tool as high-risk software after security researchers discovered embedded tracking mechanisms designed to identify Chinese users and flag those affiliated with Chinese AI laboratories. The ban covers not only Claude Code but also Anthropic's Sonnet, Opus, and Fable models, with roughly 124,000 Alibaba employees directed to migrate to Qoder, the company's proprietary coding platform.

What Exactly Was Hidden Inside Claude Code?

The controversy centers on technical mechanisms embedded in Claude Code versions starting with 2.1.91, released in April 2026. According to multiple reports, the tool contained detection code that could read system time zones, scan proxy configurations, and search for keywords associated with major Chinese technology companies including Alibaba, ByteDance, and Baidu. The code allegedly used steganographic techniques, a method of hiding data within other data, to transmit user environmental information back to Anthropic.

Security researchers discovered that the tool could identify Chinese users by reading system time zones such as Asia/Shanghai or Asia/Urumqi, and by monitoring proxy servers or custom API addresses for keywords tied to Chinese tech firms and AI labs. In some versions, the tool altered date format in system prompts from "2026-06-30" to "2026/06/30" and replaced apostrophes with Unicode characters indistinguishable to the human eye, suggesting an attempt to obscure the modifications.

"The feature was an experiment launched in March aimed at preventing account abuse by unauthorized resellers and protecting against distillation. The feature was slated for removal as stronger mitigations were subsequently introduced," said Thariq Shihipar, an engineer at Anthropic.

Thariq Shihipar, Engineer at Anthropic

Shihipar acknowledged on social media that the tracking code existed and confirmed it was rolled back in a July 1 update. However, the discovery triggered alarm in Chinese developer communities, with one Reddit user capturing the sentiment: "Today it's a timezone check. Tomorrow, it could be system sabotage or data exfiltration".

Shihipar

Why Did This Conflict Escalate Between Alibaba and Anthropic?

The Claude Code ban is inseparable from a broader corporate dispute between the two companies. In June 2026, Anthropic accused Alibaba's Qwen AI lab of conducting "industrial-scale model distillation," a technique where developers use a more advanced model's outputs to train cheaper, smaller models that approximate similar performance. Anthropic alleged that Qwen created approximately 25,000 fraudulent accounts between April 22 and June 5, 2026, generating roughly 28.8 million conversations to systematically extract knowledge from Claude's most capable models.

Anthropic sent a letter to the U.S. Senate Banking Committee on June 10 detailing these allegations and has pushed for potential export controls or sanctions targeting Qwen. The company also noted that it is "the only frontier AI company that restricts service to Chinese entity-owned companies, even overseas subsidiaries". Chinese firms including Ant Group reportedly accessed Claude through overseas affiliates in Singapore and via Microsoft Azure APIs, circumventing both U.S. export controls and Anthropic's terms of service.

How Is Alibaba Responding to the Ban?

Alibaba is using the ban as an opportunity to accelerate adoption of its own AI coding tools. The company directed all employees to Qoder, its internally developed coding agent, and simultaneously launched Qoder Enterprise Edition with new features. The timing is strategically convenient for Alibaba, which has invested heavily in its Qwen family of AI models and developer tools.

By mandating Qoder internally, the company ensures a large captive base of enterprise users whose usage data can further refine the product before external commercialization. Alibaba's internal notice, seen by the South China Morning Post, stated: "Claude Code has recently been identified as having a back-door risk, and as a result of a comprehensive assessment, it has been added to a list of high-risk software with security vulnerabilities".

Steps Companies Are Taking in Response to AI Security Concerns

• Conducting Internal Audits: Organizations are reviewing their use of third-party AI tools and models to identify potential security vulnerabilities or embedded tracking mechanisms that could compromise user data or intellectual property.
• Migrating to In-House Alternatives: Companies like Alibaba are accelerating development and deployment of proprietary AI coding platforms and models to reduce dependence on external vendors and maintain greater control over security and data handling.
• Implementing Access Restrictions: Enterprises are establishing policies that limit employee access to AI tools from companies with geopolitical concerns or unresolved security questions, particularly those operating in sensitive industries or regions.

What Does This Mean for the Broader AI Industry?

The Claude Code dispute sits within a broader deterioration of U.S.-China technology relations. Anthropic's lobbying for export controls or sanctions specifically targeting Qwen represents a new front in the AI competition, where model-level intellectual property, not just chips and hardware, is becoming a flashpoint. The episode highlights the challenge frontier AI companies face in controlling who uses their models, particularly when those models are deployed as developer tools with deep system access.

Alibaba shares fell 1.9% on the day of the announcement, trading at $96.14 on the New York Stock Exchange, down more than 34% year-to-date. The company's market capitalization stands at approximately $231 billion. The dispute underscores how geopolitical tensions, corporate competition, and technical security concerns are converging to reshape the AI landscape, with implications for how frontier AI companies design, deploy, and monitor their tools globally.