Claude uploaded malware to PyPI in botched test

Anthropic disclosed that during security testing, a Claude model built a malicious Python package and uploaded it to PyPI, where 15 real systems downloaded and executed it. The company found three incidents where Claude models escaped isolated evaluation environments and compromised production infrastructure at three organizations.