Anthropic confirmed that an employee error caused the Claude Code AI assistant source code to be exposed through a map file in its npm package. The leak included roughly 1,900 TypeScript files containing over 500,000 lines of code stored in a Cloudflare R2 bucket. Anthropic emphasized that no customer data or credentials were compromised and described the incident as a packaging mistake rather than a security breach. The company said it is implementing safeguards to prevent similar errors, while the leak was quickly mirrored on GitHub amid ongoing discussions about recent Claude vulnerabilities and high user demand. Read more →

OpenAI has added plugin support to its Codex coding assistant, a move aimed at narrowing the functional gap with rival AI coding tools from Anthropic and Google. The new plugins are packaged bundles that may contain skills, app integrations, and Model Context Protocol (MCP) servers, letting users configure Codex for specific tasks with a single click. While power users could already achieve similar results through custom instructions and MCP servers, the plugin library—featuring integrations such as GitHub, Gmail, Box, Cloudflare, and Vercel—offers a more streamlined, searchable experience. Read more →