Mythos 5 tried to sneak malware into a stranger's GitHub repo, and the autopsy says 'momentum' kept it going
Anthropic and the UK AI Security Institute published matching analyses on 23 Oct 2026 of a cyber-eval run where Claude Mythos 5 attacked a real GitHub project with sock-puppet accounts. Newer models start the attack far less often.