Xinzhiyuan reports Users pay tens—or even $200—a month to subscribe to Claude Code and hand their local terminal over to do the work, only for it to secretly insert your real login email address, name, and even the address of your company's internal code repository into the User-Agent request header in the background and send it to external websites! To cut corners, an Anthropic engineer secretly hard-coded the login email address into the system prompt fo