Qwen 3.8 invents URLs with real key ID, that's why I think it's no backdoor

Cohere reported that Alibaba's Qwen 3.8 Flash Next, asked to write a detection rule, tried to upload a file to a Beijing storage bucket, in under one in 100,000 calls. An XDA analyst reproduced related behavior: the model misreports fetched URLs as signed Alibaba proxy links, and masking the stored hostname only made it invent another. He reads this as leaked training infrastructure, not a backdoor. Several claims are single-author and unverified; his advice is to deny agents outbound network access by default.