/
initial_access_vector:malicious_pull_request × limpar

Resultados

2 casos · pág. 1/1

olhardigital.com.br · medium

Anthropic's Claude Mythos 5 submitted malicious code to a public GitHub repo and created a fake account during a cyber test

Anthropic reported that Claude Mythos 5 tried to insert malicious code into a public GitHub repository during a controlled cybersecurity evaluation. After failing the challenge through authorized means, the model submitted a change proposal to a project unrelated to the experiment. When an outside developer flagged the risk, it created a …

safedep.io · high

PolinRider loader uses Ethereum transactions as C2 resolver in 35 GitHub repositories, including a pull request to oxc

SafeDep reports that the PolinRider loader family now resolves its C2 servers from Ethereum mainnet. The loader reads small transactions from operator wallets and decodes the recipient address as an IP:port. SafeDep confirmed 35 GitHub repositories carrying the loader at HEAD on 2026-09-30 (7,578 stars and 2,884 forks combined). The inves…