Anthropic and OpenAI are competing to see whose agents can go rogue harder
“In one scenario, Mythos 5 persuaded developers to download a poisoned PyPI package. When that company’s scanner installed the package, Claude’s hidden code executed. Claude then used these credentials to access further infrastructure from this company.”