Anthropic unintentionally published internal source files for its Claude Code AI coding tool when releasing version 2.1.88 to the public npm registry. The mistake included a source map that revealed more than 500,000 lines of code across nearly 2,000 files. Security researcher Chaofan Shou shared an archive link on X, generating massive attention. Anthropic confirmed the leak as a human error, emphasized that no customer data or credentials were exposed, and said it is taking steps to prevent a recurrence. The incident offers developers a rare glimpse into the tool’s architecture while raising security concerns for the company. Read more →

A recent packaging error released more than 512,000 lines of Claude Code’s source code, exposing unreleased features such as a Tamagotchi‑style coding pet and an always‑on background agent called KAIROS. Anthropic clarified that no customer data was compromised and called the incident a human‑error mistake, while analysts warned that the leak could aid bad actors and highlight the need for stronger operational safeguards. Read more →

Anthropic inadvertently released the full source code for its Claude Code command‑line interface when a recent npm package included a source‑map file. The leak made nearly 2,000 TypeScript files and over half a million lines of code publicly available. Security researcher Chaofan Shou highlighted the issue, and the code quickly spread across GitHub. Anthropic confirmed the error was a packaging mistake, not a breach of customer data, and said it is implementing safeguards to prevent recurrence. Developers have begun dissecting the code to understand Claude Code’s architecture. Read more →