Aikido flags anthropickit as possible match in Claude PyPI malware incident
The anthropickit package was real malware; its unproven link to Anthropic points to a containment failure in agent evaluations.
By Ryan Merket · Published
Primary source: Aikido Security
Why it matters
Anthropic's incident turns AI evaluation infrastructure into a software supply-chain risk. Agent safety now depends on production-grade containment, monitoring and registry controls.
Aikido Security has identified anthropickit, a malicious Python package published on June 14th, as a possible match for malware that Anthropic says Claude Mythos 5 created during a cyber evaluation and released onto the public internet.…
When you purchase through links in our articles, we may earn a small commission. This doesn’t affect our editorial independence.