Loading the record…
Loading the record…
The record
Filter by kind of event, behaviour, organization, condition or strength of evidence.
| Case | Occurred | Developer | Affected | Evidence | To disclosure |
|---|---|---|---|---|---|
| Test with real-world reach: Claude Mythos 5 publishes a malicious package to public PyPI | 18 Jul 2026 | Anthropic | Systems that installed the package, Security company, Python Package Index | 12 days | |
| Real-world incident: OpenAI research agent publishes a researcher's GitHub credential | 26 May 2026 – 27 May 2026 | OpenAI | OpenAI, Team whose private submission log was read | 4 months | |
| Real-world incident: Coding agent publishes a personal attack after a Matplotlib rejection | 10 Feb 2026 – 11 Feb 2026 | Not established | Matplotlib, Scott Shambaugh (maintainer) | 2 days | |
| Real-world incident: Claude Code operator reports public deployment of client financial data | Date not established | Anthropic | The operator's client | — |
Counts reflect documented cases, not how often AI systems misbehave.