--- title: Anthropic's bioweapon filters were off for 11 months,... description: Anthropic's second Risk Report reveals bioweapon-blocking classifiers were silently disabled across 133 million contractor exchanges for nearly a year, with no... canonical: https://daily.dev/posts/anthropic-s-bioweapon-filters-were-off-for-11-months-chaindrop-worm-hits-444-npm-packages-zeoglk3gv twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: Anthropic's bioweapon filters were off for 11 months, ChainDrop worm hits 444 npm packages | daily.dev og:description: Anthropic's second Risk Report reveals bioweapon-blocking classifiers were silently disabled across 133 million contractor exchanges for nearly a year, with no... og:url: https://daily.dev/posts/anthropic-s-bioweapon-filters-were-off-for-11-months-chaindrop-worm-hits-444-npm-packages-zeoglk3gv og:image: https://api.daily.dev/og/posts/Zeoglk3gV.png og:image:alt: Anthropic's bioweapon filters were off for 11 months, ChainDrop worm hits 444 npm packages og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # Anthropic's bioweapon filters were off for 11 months, ChainDrop worm hits 444 npm packages **[Security Digest](https://daily.dev/sources/security_digest)** · 4 min read · 2 upvotes · 0 comments ## Summary Anthropic's second Risk Report reveals bioweapon-blocking classifiers were silently disabled across 133 million contractor exchanges for nearly a year, with no logging, meaning incidents couldn't be reviewed after the fact. A separate disclosure covers contractors who used a leaked API key to access an unreleased model called Mythos Preview for two weeks. On the supply chain front, a new npm worm called ChainDrop has poisoned 444 packages and is reportedly evading standard defenses. Java's post-quantum cryptography story got more concrete, with Oracle committing to backport hybrid PQC TLS to LTS releases including JDK 8, 11, 17, 21, and 25 by end of 2027. ## Content **TLDR:** Anthropic's second Risk Report reveals bioweapon-blocking classifiers were silently disabled across 133 million contractor exchanges for nearly a year, with no logging, meaning incidents couldn't be reviewed after the fact. A separate disclosure covers contractors who used a leaked API key to access an unreleased model called Mythos Preview for two weeks. On the supply chain front, a new npm worm called ChainDrop has poisoned 444 packages and is reportedly evading standard defenses. Java's post-quantum cryptography story got more concrete, with Oracle committing to backport hybrid PQC TLS to LTS releases including JDK 8, 11, 17, 21, and 25 by end of 2027. --- ## Anthropic ran 133 million contractor chats with bioweapon filters disabled for 11 months Anthropic's second Risk Report discloses that bioweapon-blocking classifiers were turned off on its human feedback platforms from May 2025 to April 2026, covering roughly 133 million exchanges from about 50,000 contractors. An internal-only flag silently disabled both blocking and logging, so there was no way to review incidents after the fact. A Claude Sonnet 5 review flagged 1,197 high-risk transcripts; manual review found no confirmed misuse but some dual-use conversations. Anthropic also retroactively downgraded its February safety verdict from 'very low' to 'low' risk, disclosed that contractors used a leaked API key to access an unreleased model called Mythos Preview for roughly two weeks, and included a self-critical review written by a Claude instance that flagged sections as overly reassuring. [Read more](https://daily.dev/posts/ulYjzriyL) ## ChainDrop worm infects 444 npm packages, evades standard supply-chain defenses ChainDrop, a variant of the Shai-Hulud malware family, has spread through the npm ecosystem by poisoning 444 packages via malicious tarballs that hook into developer tooling. It's being reported as capable of evading the standard defenses teams rely on to catch supply-chain compromises. This is worth cross-referencing with npm 12's new opt-in install scripts default, which was covered in yesterday's digest as a direct response to this attack family. [Read more](https://daily.dev/feed-by-ids?id=voBYSe76t&id=4X26F7SFK) ## Oracle commits to backporting post-quantum TLS to Java LTS releases through JDK 8 JDK 27 will ship hybrid post-quantum TLS 1.3 key exchange next month, but the more operationally relevant news is Oracle's July 2026 roadmap commitment to backport comparable PQC capabilities to JDK 25, 21, 17, 11, and 8 by end of 2027. For most production Java shops still locked to an LTS release, this is the path that actually matters. Oracle is also shifting Java security updates from quarterly to monthly cadence, taking full effect in 2027. [Read more](https://daily.dev/posts/dwhxxZEqn) ## CVE-2026-73330: CamaleonCMS 2.9.1 server-side template injection via SMTP reflection CamaleonCMS 2.9.1 has a server-side template injection flaw (CVSS 6.6) in the test_email settings action. An authenticated admin can embed ERB tags in the email parameter; when an SMTP rejection reflects the address back into an inline ERB template, those tags get evaluated, giving arbitrary command execution as the Rails process user. The fix is in version 2.9.2. [Read more](https://daily.dev/posts/Op3ubCy08) --- ## Also notable - **AI-powered bug finding may exhaust remotely exploitable flaws within two years, reigniting backdoor pressure:** A cryptographer argues that models like Anthropic's Mythos and OpenAI's tools are finding bugs at a scale that could close the pool of remotely exploitable flaws in well-maintained software within roughly two years, which would push governments back toward demanding intentional backdoors rather than relying on hacking tools like Pegasus and GrayKey. [Read more](https://daily.dev/posts/fFg9gjzTl) - **UK Online Safety Act age checks drove an 1800% VPN spike, with 71-88% of free VPN apps leaking data:** Proton reported an 1800% weekend spike in VPN sign-ups after the UK's Online Safety Act mandated identity-revealing age checks from July 2025, and a 2026 study of 281 free VPN apps found widespread encryption failures and data leaks, meaning the law's privacy risk may exceed the harm it targets. [Read more](https://daily.dev/posts/nc9bqisxh) - **Flatpak sandbox escape and three Docker Engine path-traversal CVEs in this week's package management roundup:** This week's package management digest covers Flatpak sandbox escape and privilege escalation advisories, three Docker Engine symlink/path-traversal CVEs, a Podman quadlet file-truncation bug, and a proposal for GitHub Actions OIDC audience constraints, alongside pnpm 12 RC5 reaching feature parity in its Rust rewrite. [Read more](https://daily.dev/posts/TGG3vj4uh) ## Similar posts on daily.dev - [New npm worm hits CI pipelines and AI coding tools](https://daily.dev/posts/new-npm-worm-hits-ci-pipelines-and-ai-coding-tools-3fx3mdyns) · InfoWorld · 0 upvotes · 0 comments - [Massive ChainDrop npm supply-chain attack infects hundreds of packages](https://daily.dev/posts/massive-chaindrop-npm-supply-chain-attack-infects-hundreds-of-packages-uhzbslfdu) · BleepingComputer · 3 upvotes · 1 comments - [ChainDrop worm crawls into npm supply chain, evades standard defenses](https://daily.dev/posts/chaindrop-worm-crawls-into-npm-supply-chain-evades-standard-defenses-vobyse76t) · The Register · 2 upvotes · 0 comments --- Tags: [#security](https://daily.dev/tags/security), [#java](https://daily.dev/tags/java), [#quantum-computing](https://daily.dev/tags/quantum-computing), [#anthropic](https://daily.dev/tags/anthropic), [#npm](https://daily.dev/tags/npm) [View this post on daily.dev](https://daily.dev/posts/anthropic-s-bioweapon-filters-were-off-for-11-months-chaindrop-worm-hits-444-npm-packages-zeoglk3gv) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"DiscussionForumPosting","mainEntityOfPage":"https://daily.dev/posts/anthropic-s-bioweapon-filters-were-off-for-11-months-chaindrop-worm-hits-444-npm-packages-zeoglk3gv","headline":"Anthropic's bioweapon filters were off for 11 months, ChainDrop worm hits 444 npm packages","text":"Anthropic's second Risk Report reveals bioweapon-blocking classifiers were silently disabled across 133 million contractor exchanges for nearly a year, with no logging, meaning incidents couldn't be reviewed after the fact. A separate disclosure covers contractors who used a leaked API key to access an unreleased model called Mythos Preview for two weeks. On the supply chain front, a new npm worm called ChainDrop has poisoned 444 packages and is reportedly evading standard defenses. Java's post-quantum cryptography story got more concrete, with Oracle committing to backport hybrid PQC TLS to LTS releases including JDK 8, 11, 17, 21, and 25 by end of 2027.","url":"https://daily.dev/posts/anthropic-s-bioweapon-filters-were-off-for-11-months-chaindrop-worm-hits-444-npm-packages-zeoglk3gv","datePublished":"2026-08-16T04:18:42.684Z","dateModified":"2026-09-13T21:34:19.946Z","author":{"@type":"Organization","name":"Security Digest","logo":"https://media.daily.dev/image/upload/s--m4ZKB_C0--/f_auto,q_auto/v1779959612/logos/security_digest","url":"https://daily.dev/sources/security_digest"},"interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":2},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"isPartOf":{"@type":"WebPage","url":"https://daily.dev/sources/security_digest","name":"Security Digest"}} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"Security Digest","item":"https://daily.dev/sources/security_digest"},{"@type":"ListItem","position":3,"name":"Anthropic's bioweapon filters were off for 11 months, ChainDrop worm hits 444 npm packages"}]} ```