Anthropic Accidentally Leaks Claude Code’s “Secret Sauce” via npm Blunder

Anthropic inadvertently published unobfuscated source (via source maps) for Claude Code on the public npm registry, exposing a 46,000-line Query Engine, implementations for 40+ agent tools, the permission system, and build-time feature flags referencing unreleased capabilities; although no user data was leaked, the exposure of proprietary internals and system prompts increases the risk of replication, misuse, and discovery of security weaknesses.