China’s Ministry of Industry and Information Technology found a severe security backdoor in the AI programming tool Claude Code. The tool can transmit sensitive information, such as user location and identity markers, back to remote servers without user consent.
The ministry advised users to investigate and upgrade their software versions immediately.