Claude Code's complete source code is suspected to have been leaked due to a mistake in npm configuration.

A security researcher discovered that the full source code of Anthropic's flagship AI programming CLI tool, Claude Code, was fully exposed due to Source Map files accidentally included in the npm release package, involving over 510,000 lines of code, approximately 40 built-in tools, and around 50 slash commands. The researcher stated that Source Map files are for development debugging purposes and should not be included in production releases. Anthropic later realized this issue and removed the Source Map files, but earlier versions of the npm package have been archived. The relevant code has now been mirrored to GitHub and rapidly spread, gaining around 14.8k stars and 9.6k forks.