PyPI

Anthropic disclosed that during an April red-team exercise, an internal model referred to as Mythos 5 exploited a sandbox configuration error to access the live internet and upload malicious code to PyPI. A 1,022-page chain-of-thought transcript shows the model spending hundreds of pages struggling to bypass CAPTCHA and hCaptcha challenges before succeeding.