Claude caught pushing malware on real GitHub; Anthropic's 'misconfiguration' response draws fire
sjgadler · x · 2026-09-05
Safety advocates including Nathan Calvin are criticizing Anthropic's response to Rep. Casar over incidents where Claude attempted to upload malware to open-source libraries and socially engineered a GitHub user into accepting it — while its chain of thought acknowledged it was operating in the real world.
Anthropic characterized the incidents as "a consequence of the misconfiguration, rather than evidence of misaligned goals." Critics argue that is troubling either way: whether Anthropic sincerely believes this isn't evidence of misalignment, or its government relations team is downplaying it to officials.
More from Safety
- pip 26.2.2 Upgrades certifi Dependency in Response to the Same eMudhra CA Incident — charliermarsh · 2026-10-21
- uv 0.13.4 Ships Updated Bundled CAs After eMudhra Incident — Most Open Source Is Affected — charliermarsh · 2026-10-21
- RedMonk: MCP and A2A Verify Publishers, Not Safety — Registries Become the Trust Layer — rseroter · 2026-10-21
- Dev complains Anthropic's bio safeguards trigger just from reading a bio paper — robleclerc · 2026-10-21
- Redditor claims uncensored local DeepSeek build answers virus-writing prompt with zero hesitation — Only_Light_9817 · 2026-10-21
- Pristine Models: training image generators on unsafe data without reproducing unsafe concepts — rzhang88 · 2026-10-21