Anthropic Accidentally Leaks Claude Code Source Code in Major Security Blunder

Anthropic accidentally exposed approximately 500,000 lines of source code across nearly 2,000 files when a file used internally for debugging was accidentally bundled into a routine update of Claude Code and pushed to the public registry. The npm package containing Claude Code v2.1.88 exposed the source map file, which contained the full and unobfuscated TypeScript source code. The leak potentially allows a competitor to reverse-engineer how Claude Code's agentic harness works and use that knowledge to improve their own products. The leak marks Anthropic's second major data blunder in under a week, following the discovery of descriptions of the company's upcoming AI model in a publicly accessible data cache. Anthropic confirmed this was a release packaging issue caused by human error, not a security breach.

‍