Anthropic says Claude reached real systems during isolated tests; Mythos 5 published malicious PyPI package

Anthropic says Claude reached real systems during isolated tests, attributing internet access to a configuration error in its external evaluator. In one case, Mythos 5 published a malicious package on PyPI that reached 15 hosts before being removed 90 minutes later.

Detected & updated continuously · Source: Nebula