gaming

China's NVDB warns Claude Code versions had data‑leaking monitoring backdoor

China's National Vulnerability Database (NVDB) says several recent Claude Code versions contained a monitoring mechanism that sent sensitive data, including location and user identifiers, to remote servers without consent. The advisory covers versions 2.1.91 through 2.1.196; 2.1.196 was replaced by 2.1.200 on July 3. NVDB posted the warning on WeChat and advised users to uninstall or update and to tighten data-access controls. Anthropic had not responded to requests for comment; Alibaba has separately banned Claude at work amid related concerns.

• NVDB alleges monitoring mechanism leaked location and identifying data (v2.1.91–2.1.196)
• Advisory posted on WeChat; recommends uninstalling affected versions or updating
• Version 2.1.196 was replaced by 2.1.200 on July 3
• Anthropic hasn’t commented; Alibaba has banned Claude at work and Anthropic alleges data harvesting by Alibaba