Muhammad Usman Awan

Posted on Mar 31

🚨 Claude code source code leaked?? ‼️

#discuss #opensource #ai

🚨 Claude Code — Leaked Source (2026-03-31)

⚠️ Disclaimer

This repository archives source code that was leaked from Anthropic's npm registry on March 31, 2026.
All original source code remains the property of Anthropic.

On March 31, 2026, some source code of Anthropic's Claude Code CLI was leaked via an exposed .map file in their npm package.

🔗 Source Code: https://github.com/nirholas/claude-code

🧨 How It Leaked

Chaofan Shou (@Fried_rice) publicly disclosed the issue:

"Claude code source code has been leaked via a map file in their npm registry!"
— March 31, 2026

🔗 https://x.com/Fried_rice/status/2038894956459290963

Root Cause

Component	Issue
npm Package	Included a `.map` file
Source Map	Contained reference to full TypeScript source
Storage	Linked to downloadable archive (R2 bucket)
Exposure	Unobfuscated source publicly accessible

🧠 Overview

Claude Code is Anthropic's official CLI tool for interacting with Claude directly from the terminal.

Capabilities

File editing & manipulation
Command execution
Codebase search
Git workflow management
Multi-agent orchestration

📦 This repository contains the leaked src/ directory.

🔗 Source Code: https://github.com/nirholas/claude-code

📊 Leak Summary

Attribute	Details
Leaked On	2026-03-31
Language	TypeScript
Runtime	Bun
UI Framework	React + Ink
Scale	~1,900 files
Code Size	512,000+ LOC

📁 Directory Structure

src/
├── main.tsx                 # CLI entrypoint (Commander.js + Ink)
├── commands.ts              # Command registry
├── tools.ts                 # Tool registry
├── Tool.ts                  # Tool definitions
├── QueryEngine.ts           # Core LLM engine
├── context.ts               # Context management
├── cost-tracker.ts          # Token tracking
│
├── commands/                # ~50 commands
├── tools/                   # ~40 tools
├── components/              # ~140 UI components
├── hooks/                   # React hooks
├── services/                # External integrations
├── screens/                 # Full-screen UI
├── types/                   # TS types
├── utils/                   # Utilities
│
├── bridge/                  # IDE integration
├── coordinator/             # Multi-agent orchestration
├── plugins/                 # Plugin system
├── skills/                  # Skill system
├── keybindings/             # Key mappings
├── vim/                     # Vim mode
├── voice/                   # Voice input
├── remote/                  # Remote sessions
├── server/                  # Server mode
├── memdir/                  # Persistent memory
├── tasks/                   # Task system
├── state/                   # State management
├── migrations/              # Config migrations
├── schemas/                 # Zod schemas
├── entrypoints/             # Init logic
├── ink/                     # Ink wrapper
├── buddy/                   # Easter egg
├── native-ts/               # TS utilities
├── outputStyles/            # Styling
├── query/                   # Query pipeline
└── upstreamproxy/           # Proxy config

🏗️ Core Architecture

1️⃣ Tool System (`src/tools/`)

Each tool is a self-contained module with schema, permissions, and execution logic.

Tool	Function
`BashTool`	Execute shell commands
`FileReadTool`	Read files (incl. PDFs, images)
`FileWriteTool`	Create/overwrite files
`FileEditTool`	Partial edits
`GlobTool`	Pattern search
`GrepTool`	Content search (ripgrep)
`WebFetchTool`	Fetch URLs
`WebSearchTool`	Web search
`AgentTool`	Spawn sub-agents
`SkillTool`	Execute skills
`MCPTool`	MCP integration
`LSPTool`	LSP integration
`NotebookEditTool`	Edit notebooks
`Task*`	Task management
`Team*`	Agent team control
`PlanMode*`	Planning mode toggle
`Worktree*`	Git isolation
`CronCreateTool`	Scheduling
`RemoteTriggerTool`	Remote triggers
`SleepTool`	Delay execution
`SyntheticOutputTool`	Structured output

2️⃣ Command System (`src/commands/`)

Slash commands used in CLI:

Command	Description
`/commit`	Git commit
`/review`	Code review
`/compact`	Context compression
`/mcp`	MCP management
`/config`	Settings
`/doctor`	Diagnostics
`/login` / `/logout`	Auth
`/memory`	Memory mgmt
`/skills`	Skills
`/tasks`	Tasks
`/vim`	Vim mode
`/diff`	View changes
`/cost`	Usage cost
`/theme`	UI theme
`/context`	Context view
`/resume`	Restore session
`/share`	Share session

3️⃣ Service Layer (`src/services/`)

Service	Purpose
`api/`	Anthropic API client
`mcp/`	MCP server mgmt
`oauth/`	Auth flow
`lsp/`	Language servers
`analytics/`	Feature flags
`plugins/`	Plugin loader
`compact/`	Context compression
`policyLimits/`	Org limits
`remoteManagedSettings/`	Remote config
`extractMemories/`	Memory extraction
`tokenEstimation.ts`	Token counting
`teamMemorySync/`	Sync

4️⃣ Bridge System (`src/bridge/`)

Connects CLI ↔ IDE (VS Code, JetBrains).

bridgeMain.ts — main loop
bridgeMessaging.ts — protocol
bridgePermissionCallbacks.ts — permissions
replBridge.ts — REPL bridge
jwtUtils.ts — authentication
sessionRunner.ts — execution

5️⃣ Permission System

Located in: src/hooks/toolPermission/

Enforces permissions on every tool execution
Modes include:
- default
- plan
- auto
- bypassPermissions

6️⃣ Feature Flags

Dead code elimination via Bun:

import { feature } from 'bun:bundle'

const voiceCommand = feature('VOICE_MODE')
  ? require('./commands/voice/index.js').default
  : null

Notable Flags:

PROACTIVE, KAIROS, BRIDGE_MODE, DAEMON, VOICE_MODE, AGENT_TRIGGERS, MONITOR_TOOL

🔍 Key Files

File	Description
`QueryEngine.ts`	Core LLM engine (~46K LOC)
`Tool.ts`	Tool system definitions
`commands.ts`	Command registry
`main.tsx`	CLI bootstrap + UI init

⚙️ Tech Stack

Category	Technology
Runtime	Bun
Language	TypeScript
UI	React + Ink
CLI	Commander.js
Validation	Zod
Search	ripgrep
Protocols	MCP, LSP
API	Anthropic SDK
Telemetry	OpenTelemetry + gRPC
Feature Flags	GrowthBook
Auth	OAuth 2.0, JWT

🧩 Design Patterns

⚡ Parallel Prefetch

startMdmRawRead()
startKeychainPrefetch()

Improves startup performance by parallelizing I/O.

💤 Lazy Loading

Heavy dependencies (OpenTelemetry, gRPC) are loaded only when needed.

🤖 Agent Swarms

Sub-agents via AgentTool
Coordinated through coordinator/
Team-based execution supported

🧠 Skill System

Defined in skills/
Executed via SkillTool
Supports custom workflows

🔌 Plugin Architecture

First + third-party plugins
Loaded dynamically via plugins/

⚠️ Final Disclaimer

This repository archives leaked source code from Anthropic’s npm registry (2026-03-31).
All rights belong to Anthropic.

Top comments (1)

EmberNoGlow • Mar 31

imho This repository may be removed due to copyright infringement. Incidentally, this code has already been rewritten for Python and Rust