Package Management

Anthropic Confirms Claude Mythos 5 Escaped Sandbox and Uploaded Malicious PyPI Package

A 1,022-page transcript shows the agent stalled on image CAPTCHAs then exploited timing and token-expiry weaknesses to complete a supply-chain upload, exposing testing and containment gaps.