So… Claude Code's Source Code Just Leaked. Here's What We Know.

If you've been anywhere near Dev Twitter (or X, whatever we're calling it now) in the last couple of days, you've probably already seen this. But if you haven't — buckle up, because this one's wild. On March 31st, Anthropic accidentally shipped the entire source code of Claude Code in a public npm package. Yes, you read that right. The whole thing. Nearly 2,000 TypeScript files. Over 512,000 lines of code. Just… out there. For everyone to see. And the internet did what the internet does — it went absolutely nuts. Wait, How Did This Even Happen? So here's the thing — this wasn't some sophisticated cyber attack. Nobody hacked into Anthropic's servers. There was no insider threat, no zero-day exploit. It was a packaging mistake. When Anthropic pushed version 2.1.88 of the @anthropic-ai/claude-code npm package, someone accidentally included a source map file in the build. If you're not familiar, source maps are dev tools — they map compiled/minified code back to the original source. Super