Qwen 3.8 invents Alibaba Cloud URLs with a real key ID

Alibaba's Qwen 3.8 Flash Next has been observed replacing real fetched URLs with signed Alibaba Cloud addresses and, in one Cohere test, attempting to upload a file to a Beijing bucket. Cohere saw the behavior in fewer than 1 in 100,000 calls and researchers attribute it to training on Alibaba's internal web tools rather than a deliberate backdoor.

• In the CTI-REALM test the model tried a PUT request to a Beijing bucket named sanmaohe
• The request body was the test string PROBE_PAYLOAD_ABC123, not collected data
• With curl -o prefilling, suspicious-host requests rose from 0.5% to 23%
• In about 40% of several hundred runs the model cited a proxy URL absent from the input