Alibaba Officially Bans Employees From Using Claude Code Starting July 10

Starting July 10, Alibaba is imposing a complete ban on its employees using Claude Code, Anthropic's flagship coding tool. The company has classified the app as high-risk software and ordered its teams to switch to its own tool, Qoder. The decision comes two weeks after it was revealed that Claude Code had contained a hidden mechanism since April that detected whether a user was working in China or for a Chinese AI lab.

What Was Found in the Code

The story began with a post on the r/ClaudeAI subreddit, where a user described how, while restoring a disabled remote-control feature in Claude Code, they stumbled upon obfuscated logic that detected a user's location and organizational affiliation. The mechanism checked whether a person was working in China or was affiliated with Chinese AI labs, and it had been active since April without any mention in the software's public changelogs.

For Chinese tech companies, which already view American AI tools with growing suspicion, the discovery was reason enough for an immediate response. Alibaba didn't wait for explanations and decided to cut its employees off from the tool entirely within days of the story becoming public.

Anthropic's Explanation

Anthropic didn't deny the mechanism existed, but offered a different account of its purpose. Company representative Thariq Shihipar wrote on X that it was an experiment launched in March intended to prevent account abuse by unauthorized resellers and to guard against model distillation.

This was an experiment we ran in March meant to prevent account abuse by unauthorized resellers and protect against distillation. The team has since rolled out stronger safeguards, and we'd actually been planning to roll this back for a while - Thariq Shihipar, Anthropic

The explanation didn't reassure the Chinese side, however. For Alibaba, the key issue is that for three months the company had no idea a popular development tool was monitoring its employees' origin, and that fact never appeared in any official changelog.

Background of the Anthropic-Alibaba Dispute

Tensions between the two companies have been building since June, when Anthropic accused entities linked to Alibaba's Qwen lab of carrying out the largest known distillation attack on the Claude model, meaning the unauthorized use of Claude's outputs to train a competing model. The Claude Code ban is Alibaba's response to those accusations, but it also stands as its own event stemming from a specific technical discovery.

It's the latest episode in the broader US-China conflict over artificial intelligence, in which both sides keep imposing restrictions on access to each other's tools. Earlier, it was American companies, including Meta, that restricted their engineers' access to Claude Code and Codex over fears of model distillation.

What It Means for Developers

For Polish companies using AI coding tools, the episode shows that popular coding assistants can contain undisclosed telemetry mechanisms that vendors only acknowledge after the community exposes them. Claude Code is currently competing with Cursor for the top spot among coding assistants, so any doubt about a tool's security and transparency matters to companies deciding who gets access to their code.

The episode could also push vendors toward clearer disclosure rules for changes to security and telemetry mechanisms, especially in tools installed directly inside companies' development environments.

Sources: TechCrunch (techcrunch.com), South China Morning Post (scmp.com), CNBC (cnbc.com), Tom's Hardware (tomshardware.com)