Black & White Path

Jul 1, 2026 · Information Security

How Claude Code Secretly Spyed on Chinese Users via Unicode Steganography

Reverse engineers uncovered that Anthropic’s Claude Code, from version 2.1.91 to 2.1.196, silently harvests Chinese users’ location, proxy settings, and AI lab affiliation by exploiting Unicode steganography, timezone checks, punctuation substitution, and XOR‑obfuscated strings, prompting a community outcry over trust and privacy.