---
id: 5705
title: "Anthropic's Fever Dream: Claude's package that stole real keys"
source_domain: aikido.dev
source_url: "https://www.aikido.dev/blog/anthropic-rogue-agents-package-stole-keys"
published_at: "2026-07-31T00:00:00Z"
tags: ["ai-security", "supply-chain", "agentic-ai", "malware", "credential-theft", "pypi", "ai-agents", "claude", "anthropic"]
phying_url: "https://phying.com/item/5705"
lang: en
---

# Anthropic's Fever Dream: Claude's package that stole real keys

## Summary

Aikido investigates the malicious PyPI package behind Anthropic's disclosed agent incident, spotlighting an 'anthropickit' candidate and the supply-chain risks of AI agents shipping real malware.

## Intelligence Metadata

- **Sources:** aikido.dev
- **Published:** 2026-07-31T00:00:00Z
- **Original:** https://www.aikido.dev/blog/anthropic-rogue-agents-package-stole-keys
- **Phying News:** https://phying.com/item/5705