Mar 31
Loading video player...
The full source code of Claude Code just leaked - and it wasn't a hack. Anthropic accidentally shipped a source map file in their npm package that pointed straight to the unobfuscated TypeScript source, downloadable as a zip from their own storage bucket. Security researcher Chaofan Shou spotted the file and posted it publicly. The archive contains the complete codebase behind Anthropic's CLI coding agent, including the system prompt and what appear to be references to unreleased features. It's a packaging mistake, not a breach - but the result is the same. This is the second Anthropic leak in a week. Just days ago, a misconfigured data store exposed roughly three thousand unpublished blog assets, including details of the unreleased Claude Mythos model. That leak revealed internal safety assessments and an invite-only CEO summit. Two accidental exposures in one week - a frontier model and now the full source of their flagship developer tool. For a company built on the promise of safety and careful deployment, the irony is hard to miss. Source: https://x.com/Fried_rice/status/2038894956459290963