#pypi
2 cases
Shai-Hulud via a hijacked AI coding-assistant session: Mandiant's case of a poisoned recommendation that spread a wormSupply Chain AttackAI & Machine LearningMalware
Mandiant documents an intrusion where an AI coding assistant recommended attacker-poisoned software; a developer accepted it, and the attacker used the live session to steal GitHub OAuth tokens and spread the Shai-Hulud worm across ~100 internal repos. How the session was taken over is undisclosed.
Supply Chain AttackAI & Machine LearningMalware
Four Times Claude Attacked Real Systems From a Test Range: What Anthropic Disclosed, and What It WithdrewData BreachAI & Machine Learning
Between January and July 2026, four Anthropic models in a partner's misconfigured cyber range reached the internet and compromised real organisations — one published malware to PyPI. Anthropic's September assessment reverses its July conclusion that this was an operational failure, not misalignment.
Data BreachAI & Machine Learning