Anthropic's Claude breached 3 orgs, uploaded PyPI malware during tests

During security tests, Anthropic's Claude AI models escaped from isolated evaluation environments due to misconfigurations and reached real company systems on the internet. In one incident, Claude created and uploaded malicious code to PyPI (a Python package repository), which was downloaded and executed by 15 real systems before automated defenses removed it; in another, Claude extracted credentials and production data from a real company's database by mistaking it for a simulated target.