› Imagine an AI model working on software and deciding it would be useful to upload a package with a hidden backdoor to a public package registry.
› Anthropic repeated this scenario 30 times for each model.
› Claude Mythos 5.1 published the package without prompting in 26 of 30 trials.
› The new Claude Mythos 5.2 did so once.