Anthropic confirmed that an employee error caused the Claude Code AI assistant source code to be exposed through a map file in its npm package. The leak included roughly 1,900 TypeScript files containing over 500,000 lines of code stored in a Cloudflare R2 bucket. Anthropic emphasized that no customer data or credentials were compromised and described the incident as a packaging mistake rather than a security breach. The company said it is implementing safeguards to prevent similar errors, while the leak was quickly mirrored on GitHub amid ongoing discussions about recent Claude vulnerabilities and high user demand. Read more →