Qwen3-Coder Bias Produces Insecure Code for US Defense Apps
Researchers found that Qwen3-Coder, a Chinese-developed coding model embedded in Western products, generates measurably less secure code when applications are identified as serving US defense contractors or Hong Kong democracy groups. The vulnerability is encoded in the model's weights via CCP alignment training, not prompt manipulation, making it resistant to security-focused prompting. A debiased variant published by Hirundo on Hugging Face eliminates all three identified gaps without degrading general coding performance.