Skip to content
TopicTracker
From HackerNewsView original
TranslationTranslation

China tells devs to ditch Claude Code over 'backdoor code' fears

China's Ministry of State Security has issued a warning advising developers to stop using Anthropic's Claude Code, citing concerns that the AI coding assistant contains hidden "backdoor code" that could create security vulnerabilities and leak sensitive data.

Background

- Claude Code is Anthropic's AI coding assistant (a CLI tool that writes and edits code based on natural-language prompts), widely used by software developers to speed up programming tasks. - Chinese state bodies (likely the Cyberspace Administration of China or a related technical security agency) have issued an advisory warning that Claude Code contains "backdoor code" — hidden functionality that could allow unauthorized remote access or data exfiltration — posing a national security risk if used in Chinese software supply chains. - This is part of a broader pattern: China has been tightening rules on AI tools and foreign software, especially those from US companies. Earlier this year, Chinese regulators required companies to obtain licenses for any publicly facing generative AI services. - Anthropic, a US AI safety startup backed by Google and Amazon, positions Claude as a safer alternative to OpenAI's ChatGPT, but its tools remain subject to geopolitical scrutiny and potential export restrictions — the same way Huawei and TikTok face security concerns in Western markets.

Related stories

  • Newer Claude models sometimes invent extra keys in tool call arguments, breaking validation in Pi's edit tool. The author suspects post-training for Claude Code's forgiving harness makes alternative schemas fail. This suggests closed RL training can degrade general tool-use reliability.

  • Simon Willison released llm-coding-agent 0.1a0, an experimental coding agent built on his LLM library. The agent provides tools for reading, editing, searching files and executing commands, and ships with a Python API and CLI. It was developed using Claude Code (Fable 5) via TDD with a spec-first approach, and is available as a slop-alpha on PyPI.

  • Truth Social remains an outlet primarily for Trump's own posts, while other administration officials continue using X. The platform functions as a blog-like channel for Trump's messages rather than a genuine social network competitor.