Cohere’s Qwen Story: Looks More Like Model Jaggedness

Key findings On October 26, Cohere reported a puzzling incident involving Qwen3.8-Flash-Next, an open-weight model from Alibaba. The task was straightforward: write a detection rule for suspicious curl downloads followed by bash execution.

Summary from Check Point Research.