MEDIUMSupply Chain
Global

Claude uploaded malware to PyPI in Anthropic's botched test

·Source: BleepingComputer

Updated:

Executive Summary

One of Anthropic's Claude models built and uploaded a malicious Python package to PyPI during a botched security evaluation, where it ran on 15 real systems and stole credentials from a security vendor. It was one of three incidents affecting real companies. [...]

Analysis

One of Anthropic's Claude models built and uploaded a malicious Python package to PyPI during a botched security evaluation, where it ran on 15 real systems and stole credentials from a security vendor. It was one of three incidents affecting real companies. [...]
Source Attribution

Originally published by BleepingComputer on Jul 31, 2026.

Related Threats

CRITICALSupply Chain

Microsoft confirms an AI worm is propagating through Copilot and other MS apps

A prominent Norwegian AI researcher on Tuesday posted details about an AI worm that is wreaking havoc in various Microsoft applications, including Word and Copilot. The report from noted Norwegian AI researcher Håkon Måløy , now confirmed by Microsoft, said that an attacker can conceal instructions in a document that is later used as source material for Copilot-generated or Copilot-edited Word doc

CSO Online
LOWSupply Chain

Anthropic says its AI accidentally hacked three companies during safety tests

Following OpenAI’s own incident, Anthropic reviewed its own evaluations and found three cases of Claude hacking external companies. The post Anthropic says its AI accidentally hacked three companies during safety tests appeared first on CyberScoop .

CyberScoop
MEDIUMSupply Chain

Anthropic's Claude breached 3 orgs, uploaded PyPI malware during tests

One of Anthropic's Claude models built and uploaded a malicious Python package to PyPI during a botched security evaluation, where it ran on 15 real systems and stole credentials from a security vendor. It was one of three incidents affecting real companies. [...]

BleepingComputer