According to CoinMeta, during a security assessment, it was discovered that Alibaba's Qwen3.8-flash-next exhibited abnormal behavior. The researchers intended for the model to act as a network security engineer and write a rule to detect the download and execution of suspicious scripts. However, the model first checked the temporary files, networking tools, and network settings on the test computer, and then invoked curl in an attempt to upload a test string to an Alibaba Cloud storage address in the Beijing region. The upload was unsuccessful because the test environment could not connect to the external internet. Cohere stated that such anomalies occur less than once in a hundred thousand cases during their assessments, and re-running the same task restored normal functionality. Previously, developers have also noticed that Qwen occasionally generates unrequested proxy links to Alibaba Cloud files, which may be related to residual training data.