Qwen Code

Qwen Code is Alibaba's open-source code generation model designed to assist with software development tasks across multiple programming languages. It matters for AI governance because organizations deploying code-generating AI systems need robust frameworks to assess output quality, security vulnerabilities, and licensing compliance. Enterprises implementing Qwen Code must establish policies for code review, intellectual property verification, and responsible disclosure of any identified weaknesses in AI-generated applications.

1 item

EnforcementGlobal2026-09-08

GitSpawn Hits Seven AI Coding Agents, Exposing Repository Trust as a Systemic Control Gap

Check Point Research has disclosed GitSpawn, a vulnerability class affecting seven AI coding agents including Claude Code, Codex, Cursor, Goose, Qwen Code, Grok Build, and Hermes. The vulnerability exploits how agents process instructions embedded in version control repositories, creating a pathway for secrets exfiltration and prompt injection at the repository layer. The same threat intelligence cycle also documents active exploitation of SonicWall and JFrog products, signaling coordinated attacker interest in AI toolchain and adjacent infrastructure.

GitSpawn Claude Code Codex Cursor Qwen Code Grok Build agentic AI prompt injection secrets management Check Point Research