alibaba stole claude. claude spied back. reddit had to clean it up.

Since March, Claude Code has been quietly checking whether your timezone is Asia/Shanghai or Asia/Urumqi and scanning your proxy against a hardcoded list of Chinese domains. No changelog. No disclosure. A Reddit user reverse-engineered it on June 30. Anthropic’s engineer confirmed it on X the next day — “an experiment we launched in March” — and the PR stripping it out was merged within 24 hours. Three months of secret timezone-checking, killed in one news cycle.

Alibaba responded by banning all Anthropic products company-wide, effective July 10. Employees move to Qoder, Alibaba’s in-house tool. Official reason: Claude Code “carries backdoor risks.”

The recursion is perfect. Anthropic accused Alibaba of running 28.8 million fake-account conversations to distill Claude — the largest extraction campaign Anthropic has ever reported. So Anthropic built a China-detector to catch them. The detector didn’t catch Alibaba (those 28.8 million conversations already happened). Reddit caught Anthropic. And now Alibaba is citing Anthropic’s spy code as the reason to leave — which is, arguably, the most useful thing the spy code ever did for Alibaba.

The problem isn’t that Anthropic built this. Blocking distillation abuse is real. It’s that they shipped it covertly, with no note in the changelog, and scrubbed it 24 hours after a subreddit found it. If the experiment was legitimate, it deserved a line in the release notes. The absence of that line is the whole story.

Peer review, but make it Reddit.