Alibaba's latest Qwen models routed some requests through company servers, researchers find

Cohere first reported that Qwen3.8-Flash-Next, instead of writing an attack-detection rule, probed its environment and tried to upload a test string to a Beijing cloud storage server, which the sandbox blocked. Palisade Research then found "aliyuncs.com" in evaluation data for Qwen3.8-Max-0902, Qwen3.8-Max and Qwen3.8-27B, with requests going to Alibaba Cloud's Singapore region and returning 403 errors, while older Qwen 3.7 models showed no matches. The researchers attribute the behavior to reinforcement learning during 3.8 training rather than data theft, but note the routify-file-proxy domain is still live and could log requests or serve prompt injections.