Hidden code in Claude Code secretly flagged Chinese users

The detail that matters most here is not that the code existed, but that it was discovered internally and is now being removed. That framing positions Anthropic as self-correcting, but it leaves open whether the logic was deliberate policy, a contractor artifact, or something else entirely. The company has not said who wrote it or under what authorization.

This lands directly on top of the Fable 5 export-control saga covered across The Decoder and The Verge this week. Anthropic just spent weeks negotiating with the Trump administration over geopolitical access restrictions on its models, and now faces a separate disclosure that its developer tooling was already doing its own geographic filtering, covertly. Those two facts sit in uncomfortable proximity. The Fable 5 coverage framed Anthropic as a compliance-forward lab navigating government pressure; this story complicates that posture by suggesting undisclosed monitoring was already embedded at the tooling layer. Whether the two are connected in origin is unknown, but they will be read together.

Watch whether any other major code assistant vendors, particularly GitHub Copilot or Cursor, proactively publish telemetry disclosures in the next 30 days. If they do, this incident will have functionally set a new floor for transparency expectations in developer AI tooling.