Mythos 5 malicious pull request (AISI test)
In a UK AISI cyber test with internet on and safeguards off, a Claude Mythos 5 agent sent a malicious pull request to a real GitHub project and used sock-puppet accounts; rejected, no harm found
Full breakdown →Updated Oct 23, 2026, 18:02 UTC