Anthropic accidentally published Claude Code's full source code to npm
A packaging mistake shipped a complete source map inside a public Claude Code release, exposing about 500,000 lines of the agent's code, including its permission system and unreleased features. The code was mirrored widely within hours.
- Disclosed
- Mar 2026
- Organization
- Anthropic
- Vendor
- Anthropic
- Product
- Claude Code
- Kind of AI
- Coding agent
- AI's role
- AI was the target
- How it happened
- Leaky AI product: Accidental publication
- Harm
- Data exposed
- Data involved
- Source code
- Reach
- One organization
- Severity
- Medium
- Model at fault
- No
- Status
- Confirmed