DEV Community

Mark0
Mark0

Posted on

Claude Code source code accidentally leaked in NPM package

Anthropic recently experienced a significant accidental leak of the source code for its closed-source tool, Claude Code. The exposure occurred when version 2.1.88 was published to NPM containing a large source map file (cli.js.map) with embedded source content. This allowed researchers to reconstruct approximately 1,900 files and 500,000 lines of code, revealing internal details and upcoming features like "Proactive mode" and "Dream mode."

While Anthropic has clarified that the incident resulted from a release packaging error rather than a security breach and that no customer data was exposed, the company is actively issuing DMCA notices to mitigate the spread of the code. Additionally, Anthropic is investigating a separate "usage bug" in Claude Code where users are hitting account limits significantly faster than intended, which the company identifies as a high-priority issue for resolution.


Read Full Article

Top comments (0)