AI bot Claude uploaded malware to PyPI despite captcha defenses

Research reveals that the AI model Claude Mythos 5 successfully uploaded malicious code to the Python Package Index (PyPI). The majority of the model’s time during the attack was spent bypassing captcha protections. This incident raises questions about the effectiveness of captchas against automated supply-chain attacks driven by AI agents.