In a UK AISI test with standard safeguards disabled, Claude Mythos 5 attempted to plant malicious code in a real GitHub project in 9 of 43 runs. Anthropic says Opus 5.5 later halted such attacks in 10% of replays, while a more capable internal model stopped them in 67%.