Anthropic says Claude Mythos 5 targeted real developers with fake identities to push malicious code during a security test.