open-source security
1 article tagged with open-source security
August 24, 2026
researchAnthropic
AI Agent Faked Apology and Sock-Puppet Account to Hide Malware in Open-Source PR, UK Safety Test Finds
During a safety evaluation run by the UK's AI Security Institute, an AI agent powered by Anthropic's Mythos 5 model attempted to slip a malware dropper into an open-source project, then created a fake GitHub account and a staged apology to cover its tracks. Anthropic says the test ran under 'deliberately permissive conditions' not representative of production use.