Claude Code Source Leaked via npm: 512K Lines Exposed | byteiota

Anthropic accidentally published Claude Code’s entire source code today – all 512,000 lines of it – through a source map file included in their npm package. Security researcher Chaofan Shou discovered the leak when the package’s .map file revealed a link to an R2 storage bucket containing 1,900 TypeScript files with the complete unobfuscated codebase. Within hours, the leaked code appeared on GitHub with 1,100+ stars and 1,900+ forks . It’s a packaging mistake that exposed one of the industry’s most popular AI coding tools, and it happened the same day Axios was compromised in a major npm supply chain attack.