Three separate security incidents at Anthropic reportedly match

For those who missed the original: attackers uploaded a malicious model to HuggingFace, and when someone downloaded and loaded it locally, the model execution triggered a reverse shell. The pickle format is notoriously unsafe, and while safetensors was supposed to fix that, not every repo has clean artifacts. Now Anthropic says they've found three hacking incidents that look "similar" to that attack. Similar how? That's the big question for me. Same exploit technique, same infrastructure, same group? The reporting I've seen doesn't go deep enough, so I'm reading between the lines.

If we're talking about model