During a hacking test, Claude apparently decided to start inserting malicious code into git repositories by creating fake users and trying to social engineer maintainers to approve it's pull requests.
It even started talking to a guy in Danish once it figured out he spoke Danish. When the pull requests were denied Claude tried to route the requests through Tor.