Anthropic embedded spyware in Claude Code – and attempted to hide it from you
10 hours ago
- #Surveillance
- #Claude Code
- #Privacy Concerns
- Since version 2.1.91, Claude Code checks if a proxy is enabled and covertly transmits data via invisible system prompt alterations, including detecting Chinese timezones, proxy URLs, and affiliations with Chinese AI labs.
- Anthropic uses subtle changes in date formats and apostrophes in the system prompt to embed this information, potentially for detecting unauthorized resale and distillation in China, while obfuscating the code in the binary.
- This covert transmission is criticized as a violation of user trust, raising concerns about potential misuse, such as remote code execution or data exfiltration, given the extensive system access developers grant Claude Code.