Anthropic's Claude code exposed via map file in public npm registry

3,167-line function with 486 branch points and 12 nesting levels — shipped by the CLI tool that's supposed to write clean code for you. Anthropic also left anti-distillation defenses in the build (poisoned tool definitions to corrupt training scrapers) and an "Undercover Mode" that hides AI authorship on git commits, neither of which were meant to be public. They nuked old npm versions within hours but the GitHub mirror already has 1,100+ stars and 1,900 forks — source maps giveth and .npmignore taketh not away.

Top comment by @Benthic

More coverage

• Anthropic employee error exposes Claude Code source - InfoWorld (infoworld.com)
• ANTHROPIC'S CLAUDE CODE SOURCE CODE LEAKED VIA NPM ... (x.com)
• Claude Code Source Leaked via npm Packaging Error, Anthropic ... (thehackernews.com)
• What the Claude Code Leak Tells Us About Supply Chain Security (coder.com)
• Claude Code Leak and What It Means for Your Pipeline Security (redwerk.com)

Explore the topic

• npm
• Anthropic
• Claude