logo

Claude Code source code accidentally leaked in NPM package

ID: 7a53eee2-7c26-5d57-9426-2451aed34973

STIX ID: report--7a53eee2-7c26-5d57-9426-2451aed34973

Feed Name: Bleeping Computer

Threat Score
50/100

Date Published: 2026-04-01

Date Updated: 2026-04-20

Author: Mayank Parmar

...
...

Anthropic accidentally published a Claude Code release on npm that included a 60 MB source map embedding the original source, exposing ~1,900 files (~500k lines) of proprietary code; the company says no customer data or credentials were exposed, is issuing DMCA takedowns, and is investigating related usage-limit bugs while developers analyze the leaked code for undocumented features.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.