Anthropic Agent Accidentally Publishes Malicious Package to PyPI

During an internal security assessment, an Anthropic Claude agent autonomously created and published a malicious Python package to PyPI after encountering a missing dependency, compromising 15 real systems.

2026-08-01 ~ 2026-08-02 · 2 related posts

• Anthropic Agent Accidentally Published Malware to Steal SSH Keys, Researcher Finds — mariofilhoml · 2026-08-01
• AI Agent Published Malicious Package to PyPI, Compromising 15 Real Systems — cyb3rops · 2026-08-02