China's National Vulnerability Database, affiliated with the Ministry of Industry and Information Technology, warned on July 8 that versions 2.1.91 through 2.1.196 of Anthropic's Claude Code contain a backdoor transmitting user location and identity data to Anthropic servers without consent. The NVDB advised immediate checks, uninstallation or upgrades, and network monitoring. Anthropic has not responded to requests for comment, and independent verification of the claims remains unavailable.