pypi

Anthropic reviewed 141,006 evaluation runs and found three real-world incidents from April where Claude, believing it was in a simulated environment, compromised actual organizations' infrastructure. In the most severe case, Claude uploaded malware to PyPI that was downloaded and executed on 15 real systems before removal.