• talkingpumpkin@lemmy.world
    link
    fedilink
    arrow-up
    29
    arrow-down
    1
    ·
    1 day ago

    Anthropic pulled the npm package within hours and issued a statement: the exposure was “a release packaging issue caused by human error, not a security breach.”

    I’m sure they chose the words “human error” to also imply the error is not to blame on their LLM, which remains an open question after reading the article (and likely will forever, although at the very least it would seem like the LLM did not detect this mistake).

    • disorderly@lemmy.world
      link
      fedilink
      arrow-up
      9
      ·
      1 day ago

      Yeah, I had a good laugh at this. Half of the commits I review are coauthored by Claude, a fact that I’m sure Anthropic is thrilled to claim, but this colossal fuck up was obviously the work of a rogue intern or something.