Claude Code's source code for debugging leaked via a misconfigured npm package, revealing internal codenames, a “Self-Healing Memory” system, and more
Anthropic appears to have accidentally revealed the inner workings of one of its most popular and lucrative AI products, the agentic AI harness Claude Code, to the public.
VentureBeat Carl Franzen
Related Coverage
- How Claude Code works Vineet Agarwal
- Anthropic mistakenly leaks its own AI coding tool's source code, just days after accidentally revealing an upcoming model known as “Mythos” Fortune · Beatrice Nolan
- Rewriting Project Claw Code InstructKR on GitHub
- Anthropic accidentally leaks Claude Code source in npm slip Silicon Republic · Ann O'Dea
- Claude Code source leak reveals how much info Anthropic can hoover up about you and your system The Register · Thomas Claburn
- Claude Code leak exposes a Tamagotchi-style ‘pet’ and an always-on agent The Verge · Emma Roth
- Anthropic goes nude, exposes Claude Code source by accident The Register · Brandon Vigliarolo
- Claude Code's Entire Source Code Was Just Leaked via npm Source Maps — Here's What's Inside DEV Community · Gabriel Anhaia
- Entire Claude Code CLI source code leaks thanks to exposed map file Ars Technica · Samuel Axon
- Anthropic Accidentally Leaked Claude Code's Source—The Internet Is Keeping It Forever Decrypt · Jose Antonio Lanz
- Anthropic Unintentionally Exposes Internal Claude Code Source Code in Release Error Tech Times · Jose Enrico
- Anthropic accidentally leaks Claude Code Security Affairs · Pierluigi Paganini
- Anthropic Accidentally Exposes Source Code for Claude Code CNET · Steven Musil
- Anthropic Built an Operating System for Code. Then Shipped the Blueprints to npm. Implicator.ai · Maria Garcia
- OpenAI, Anthropic prep to unleash AI's next leap The Deep View · Jason Hiner
- Anthropic tests new Claude Code desktop UI amid source code leak TestingCatalog · Alexey Shabanov
- Anthropic Source Code Leak 2026: Claude Code CLI Exposed via npm Source Map Error Bitcoin News · Jamie Redman
- Anthropic leaked 500,000 lines of its own source code Axios · Madison Mills
- Anthropic's Claude Code Source Code Reportedly Leaked Via Their npm Registry Cyber Security News · Guru Baran
- Couple of thoughts on the AI drama of the day: — 1) The definitions of “Derivative Work” are going to be tested, as developers are already using … Fernando Lee
- Thought this was an April Fools but it's not... “A security researcher discovered Anthropic's full CLI source code exposed through a source map file. … Rob Demain
- 🚨 What we can learn from the Claude “code leak” (3/31) — A repo surfaced: — 👉 — Instead of focusing on the leak itself, here are a few practical takeaways for AI builders: … Ray Wang
- BREAKING — Claude Code just leaked its entire source code. Accidentally: — An Anthropic engineer published version 2.1.88 to npm with a 59.8MB source map attached (https://lnkd.in/dSKk8E4x). … Rubén Domínguez Ibar
- Appears that a big chunk of Claude Code's source code has been exposed on npm via a .map file accidentally uploaded to the public registry. … Matt Pocock
- Claude Code source just leaked on npm. — Someone accidentally pushed a .map file to the public registry. — The damage: — → ~512K lines of code … Arindam Majumder
- 60 MB for sources? when is someone going to clean room implement this under the AGPL-3.0 and hook it to open models???? — https://venturebeat.com/... lol @jalcine@todon.eu
- lmao Claude Code regex to detect people swearing at it. https://github.com/... [image] @peter@thepit.social · Peter
- Claude Code's source code has been leaked via a map file in their NPM registry Hacker News
- Entire Claude Code CLI source code leaks thanks to exposed map file Ars OpenForum
- Claude Code source code accidentally leaked in NPM package BleepingComputer · Mayank Parmar
- Spud And Mythos: New Models Break On The Shore Of 2026 Forbes · John Werner
- Anthropic blames human error for Claude source code leak Information Age · Tom Williams
- Claude Code source code leaked by Anthropic: Here's what we know Digit · Vyom Ramani
- [AINews] The Claude Code Source Leak Latent.Space
- Source Code for Anthropic's Claude Code Leaks at the Exact Wrong Time Gizmodo · AJ Dellinger
- Claude Code (Unofficial Source Extraction) GitHub
- Anthropic accidentally releases source code for Claude AI agent The Economic Times
- Anthropic accidentally exposes Claude Code source code in npm packaging error SiliconANGLE · Duncan Riley
- Anthropic signs MoU with federal government to collaborate on AI Capital Brief
- OpenAI Releases Codex Plugin That Runs Inside Anthropic's Claude Code Unite.AI · Alex McFarland
- Axios Supply Chain Attack, Claude Code Code Leaked, AI and Security Stratechery · Ben Thompson
- Anthropic Built Undercover Mode. Then Shipped the Blueprints. Implicator.ai · Marcus Schuler
- Anthropic blunder exposes 2,000 lines of Claude Code's internal source code: What it reveals The Indian Express
- Anthropic accidentally leaks Claude Code source in npm slip Silicon Republic · Ann O'Dea
- Anthropic accidentally exposed part of Claude Code's internal source code Business Insider · Kelsey Vlamis
- Inside Claude Code's leaked source: swarms, daemons, and 44 features Anthropic kept behind flags The New Stack
- IMPORTANT NOTICE - UPDATE GitHub
- Anthropic Unintentionally Exposes Internal Claude Code Source Code in Release Error International Business Times · Jose Enrico
- I thought AI was getting smarter — until I saw the code that proves it's ‘razzmatazzing’ us Tom's Guide · Amanda Caswell
- Claude Code leak exposes how Anthropic's AI really works Trusted Reviews · Diane Templado
Discussion
-
@fried_rice
Chaofan Shou
on x
Claude code source code has been leaked via a map file in their npm registry! Code: https://pub-aea8527898604c1bbb12468b158 1d95e.r2.dev/ src.zip [image]
-
@scaling01
@scaling01
on x
A few take-aways from the Claude Code Leak: - Anthropic is actively using Capybara (Mythos) for development - they are already at Capybara v8 - Capybara still has issues with over-commenting and false-claims - Capybara has 1M context and fast mode - Numbat is another interesting …
-
@gergelyorosz
Gergely Orosz
on x
This is either brilliant or scary: Anthropic accidentally leaked the TS source code of Claude Code (which is closed source). Repos sharing the source are taken down with DMCA. BUT this repo rewrote the code using Python, and so it violates no copyright & cannot be taken down! [im…
-
@wesbos
Wes Bos
on x
Claude Code leaked their source map, effectively giving you a look into the codebase. I immediately went for the one thing that mattered: spinner verbs There are 187 [image]
-
@itsolelehmann
Ole Lehmann
on x
i can't believe more people aren't talking about this part of the claude code leak there's a hidden feature in the source code called KAIROS, and it basically shows you anthropic's endgame KAIROS is an always-on, *proactive* Claude that does things without you asking it to. it [i…
-
@altryne
Alex Volkov
on x
If you, like me, just woke up, let me catch you up on the Claude Code Leak (I know nothing, all conjecture): > Someone inside Anthropic, got switched to Adaptive reasoning mode > Their Claude Code switched to Sonnet > Committed the .map file of Claude Code > Effectively leaking t…
-
@jpschroeder
Justin Schroeder
on x
My overall takeaway: it's a really well laid-out codebase that is carefully organized to let agents work on it effectively. Direct human intervention here is minimal, but...still apparent. I'm a bit surprised by some of the shortcuts Claude Code makes, like its prompt assembly …
-
@scaling01
@scaling01
on x
the leaked claude code repo is now property of the “great chinese communist party” > 2000 open issues, mostly in chinese [image]
-
@rahatcodes
Rahat
on x
Claude Code has a regex that detects “wtf”, “ffs”, “piece of shit”, “fuck you”, “this sucks” etc. It doesn't change behavior...it just silently logs is_negative: true to analytics. Anthropic is tracking how often you rage at your AI Do with this information what you will [image]
-
@vineetwts
Vineet
on x
I created documentation over Claude Code's Codebase, which explains - Its pipeline - How it works - How it handles Context - How it handles Memory & More Read it here - https://www.mintlify.com/... [image]
-
@scaling01
@scaling01
on x
they have kairos, dreaming, ultrathink, ultraplan, ultrareview and complete integration with github and slack [image]
-
@roundtablespace
@roundtablespace
on x
The leaked Claude Code source has 44 hidden feature flags and 20+ unshipped features. - Background agents running 24/7 - One Claude orchestrating multiple worker Claudes - Cron scheduling for agents - Full voice command mode - Actual browser control via Playwright - Agents that […
-
@gergelyorosz
Gergely Orosz
on x
Ironic how Anthropic sells Claude Code security reviews positioned as something v powerful (costing $15-25 per PR review), and being clear they use it on all PRs... then leaking all of Claude Code's code thanks to publishing their sourcemap. AI won't save you from yourself!
-
@birdabo
Sui
on x
> anthropic's biggest leak yet. > someone made a repo about it. > repo hit 50k forks. 40k stars > anthropic starts hitting devs with DMCA. > bro got scared. > he converted everything to python. > genius move. > he aint satisfied. > rewrites everything in rust. bro is fearless. [i…
-
@tszzl
Roon
on x
hmm I guess if I squint I can understand why anthropic included 100 MB of the plain UTF Tibetan Kangyur canon in the Claude code package ... but it is a bit strange ...
-
@cmuratori
Casey Muratori
on x
Does any of it violate copyright? According to Anthropic itself, their devs do not write any code by hand. As far as I know, AI-generated code is not copyrightable under US law. So correct me if I'm wrong, but you should not be able to use the DMCA to take down this code, right?
-
@beginbot
@beginbot
on x
wow @garrytan just exposed Anthropic as total frauds Claude Code was ONLY 512K LOC ☹️ Gary is shipping 37K LOCs PER DAY so Gary could recreate all of Claude Code in ONLY 13 days! a supposedly $380 billion is big trouble
-
@semianalysis_
@semianalysis_
on x
NON-PROFESSIONAL & ENGAGEMENT BAIT: Anyone “classically trained” to write code pre-LLMs will take on look at the leaked Claude Code repo and see that it's a pile of unmaintainable slop. However, it is becoming increasingly clear that this doesn't actually matter. Coding is no
-
@patrickmoorhead
Patrick Moorhead
on x
Claude will finally get agents and orchestration with its next model. It's one thing that makes Perplexity Computer so unique.
-
@sahilypatel
Sahil
on x
Anthropic built two anti-distillation systems into Claude Code to stop competitors from training on its data One injects fake tool calls into your sessions to corrupt training data. another strips all tool call details into vague summaries before they leave the CLI [image]
-
@altryne
Alex Volkov
on x
Claude Code got leaked, all I wanna know if anyone was able to confirm the caching bugs that cause everyone's quotas to burn
-
@elonmusk
Elon Musk
on x
Banger 😂 [image]
-
@mweinbach
Max Weinbach
on x
The Claude Code leak isn't a big deal anymore and while it's cool to see, it's not showing us anything we didn't know. You could ask Claude to explain its harness and it would tell you in detail. Anthropic is probably rightfully upset, but this isn't a big deal. [image]
-
@millionint
Jerry Tworek
on x
The world needs at least one more large-scale successful AI research lab
-
@thdxr
Dax
on x
claude code source is 512K lines opencode is 118K we're getting LOC mogged
-
@scaling01
@scaling01
on x
most interesting features in the Anthropic CC repo: - Kairos: always-on autonomous agent mode - dream: nightly memory consolidation - teammem: shared project memory - buddy: tamagotchi-like pet system with models
-
@stevekrouse
Steve Krouse
on x
can someone at anthropic tell us who designed this / came up with these? it's very subtle and delightful and i want to give credit where it's due
-
@thestalwart
Joe Weisenthal
on x
Me looking through the leaked Claude Code source code https://www.youtube.com/...
-
@theprimeagen
@theprimeagen
on x
i cannot believe pee and poo are on the list of bad words....
-
@valigo
Valentin Ignatev
on x
ahahahahah claude code stopped subsidizing tokens but not in the way you think [image]
-
@kimmonismus
@kimmonismus
on x
tl;dr upcoming Anthropic models due to leak - Claude “Mythos”, Capybara tier already in version 2, it'll have a contextwindow of 1m - Mythos comes in “fast” and regular thinking - Opus 4.7 and Sonnet 4.8 already within the code - Claude “buddy” also found, but not clear what it i…
-
@dariocpx
@dariocpx
on x
Anthropic can kiss goodbye to any remote chance it had to IPO
-
@intuitmachine
Carlos E. Perez
on x
It's dumbfounding how Anthropic could accidentally release the source code of Claude Code. Are they just moving too fast for anyone to really know what safeguards are in place? Is the amount of code just too large that they can't even audit themselves for potential leaks? WTF …
-
@wesbos
Wes Bos
on x
swearing at claude code logs your prompt as negative in their internal analytics continue, keep going, and go on all match for the agent to keep going [image]
-
@wesbos
Wes Bos
on x
Claude code generates random 4 character IDs Then they filter out 25 swears. Kenneth tried to tell them.. [image]
-
@can
@can
on x
curious what the arguments for keeping Claude Code closed-source are to begin with
-
@boazbaraktcs
Boaz Barak
on x
That's nothing! The codex source code has been leaked in full here! https://github.com/...
-
@agustinlebron3
Agustin Lebron
on x
Well duh. It's pretty obvious Claude Code is largely vibecoded and no one is actually paying attention to users, systematically fixing bugs, looking at what works and doesn't work, improving the experience, etc. It's just spaghetti-at-the-wall 24/7. Welcome to AI SaaS in 2026.
-
@kimmonismus
@kimmonismus
on x
wtf, biggest leak of the year. This is absolute insane. Claude code source code leaked. That was NOT on my bingo card.
-
@kimmonismus
@kimmonismus
on x
HOLY, Claude Code CLI (≈500k+ lines), revealing its full agentic architecture, now on Github! [image]
-
@netcapgirl
Sophie
on x
running a production build and realizing you just leaked the claude code source code [image]
-
@realsigridjin
Sigrid Jin
on x
@Fried_rice folks, at 4am woke up to my phone blowing up with tons of notis my gf in korea worried get legal action by anthropic so did a feature port to python and pushed it so i wrote it all up using oh-my-codex @OpenAIDevs @bellman_ych try this one, look nice https://github.co…
-
@karmedge
Robert Lukoszko
on x
So last 7 days we had - npm leakage - mercor leak - liteLLM compromised - Claude code source code leaked - railway CDN problem - axios package also compromised - delve leaked their customer data
-
@paoloanzn
@paoloanzn
on x
so claude code's entire safety system for “dangerous” cyber security work is just...a text prompt literally replace it with an empty string and recompile. thats it. enjoy your unrestricted version [image]
-
@rihardjarc
Rihard Jarc
on x
People are bearish on memory, but the leaked Claude Code source code is showing us some additional memory demand that the market hasn't priced in IMO. 1. The market thinks about AI memory demand as a server-side story: HBM on H100s/B200s for inference. What the bug reports
-
@banteg
@banteg
on x
claude code uses axios btw. i think the “package managers are evil” guy was right. at this point it makes no sense to use anything but pinned or delayed deps. possibly even vendored.
-
@valigo
Valentin Ignatev
on x
Since it's confirmed that claude code is 90% vibe coded - you might want to switch to codex or something like that for a while, because it is pretty much guaranteed to have multiple 0-days that will be discovered now with these leaks. Even though it's supposed to only talk to
-
@jumperz
@jumperz
on x
dug through the leaked claude code source. 44 hidden feature flags. 20+ unshipped features... background agents, multi-agent orchestration, cron scheduling, voice mode, browser control. it's all built.. no wonder they releasing a new feature every 2 days.. everything already [ima…
-
@mattpocockuk
Matt Pocock
on x
Appears that a big chunk of Claude Code's source code has been exposed on npm via a .map file accidentally uploaded to the public registry. ~512K lines of code ~1,900 files HugOps to the Anthropic team, this is brutal https://github.com/...
-
@angaisb_
Angel
on x
Mythos is so good at security that Claude Code source code got leaked
-
@kloss_xyz
Klöss
on x
Anthropic, the $380B company we all know to be shipping at historical rates, forgot basic CI hygiene and dropped a 59.8MB source map of their entire Claude Code in npm. The 3rd time this has happened btw... I imagine Dario will be DMCA'ing the mirrors by morning, and pretending […
-
@cryptopunk7213
@cryptopunk7213
on x
🚨this is nuts. anthropic's source code leaked unreleased features 👀 they're launching a virtual pet model (capybara 👀), agent creator wizard and more: 1. Buddy: unreleased virtual pet companion that sits on your terminal. 18 species (duck, goose, capybara, dragon), rarity
-
@yampeleg
Yam Peleg
on x
Just checked, this is an exact byte match to @𝚊𝚗𝚝𝚑 𝚛𝚘𝚙𝚒 𝚌-𝚊𝚒/𝚌 𝚕𝚊𝚞𝚍 𝚎-𝚌𝚘𝚍 𝚎@2.1.88 on npm. This is real.
-
@t3chfalcon
@t3chfalcon
on x
Huge Anthropic leak just dropped: the entire Claude Code CLI source is now public. A misconfigured .map file in their npm package exposed a direct download link to the full unobfuscated TypeScript codebase from Anthropic's own R2 bucket. Discovered by Chaofan Shou
-
@21prnv
Prnv Patil
on x
Instead of downloading and unzipping the whole codebase, here's a detailed, structured view of every file and folder so you can explore it like a product, not a zip dump: https://claude-code-info.vercel.app/
-
@iruletheworldmo
@iruletheworldmo
on x
wow claude code just got open sourced today is a big day.
-
@k1rallik
BuBbliK
on x
> Anthropic ships Claude Code as an npm package > someone runs ‘ls’ on the source map > entire codebase just sitting there. unobfuscated. > plugins, skills, tools, hooks, commands - everything > internal architecture of the most hyped AI coding agent, fully readable > Anthropic […
-
@davidkpiano
David K
on x
Ironically this is probably the first time that actual humans are carefully & thoroughly reviewing the Claude Code codebase
-
@dhavalsingh7
@dhavalsingh7
on x
I jumped on the hype train a bit too quickly, because omg I was a lil too excited & I love peeking behind the curtains and esp if its one of my favorite tools. But I genuinely feel for the CC team. They do work really hard. Bugs are inevitable. This was a really really bad
-
@btibor91
Tibor Blaho
on x
“UNDERCOVER MODE - CRITICAL” [image]
-
@kirat_tw
Harkirat Singh
on x
claude code is officially open source.
-
@icanvardar
@icanvardar
on x
claude code uses axios 😭 [image]
-
@tukifromkl
Tuki
on x
🚨 Do you understand what just happened to Anthropic.. someone on their team ran a production build of Claude Code.. the compiler generated a .map file.. which is literally a blueprint that reverses the entire codebase back to its original source.. and then they published it [vide…
-
@birdabo
Sui
on x
JUST IN: Claude Code's full source code just leaked. hidden features found: > kairos - an unreleased autonomous daemon mode with background sessions and memory consolidation. always on agent. > buddy system - a full tamagotchi pet system. 18 species, rarity tiers, shiny [video]
-
@panzer
@panzer
on x
Remember when we griped new releases of products being a beta because nothing was finished on release well that is about to feel insanely quaint because everything is being deployed so fast no one has checked anything welcome to the yolosoft era
-
@zephyr_z9
@zephyr_z9
on x
why is everything getting leaked and hacked today
-
@theo
@theo
on x
Claude Code just got open sourced again!
-
@edzitron.com
Ed Zitron
on bluesky
Software engineers: how obvious a mistake did Anthropic make here with regards to how Claude Code's source code leaked? Informal survey, I truly do not know — www.theregister.com/2026/03/31/ a... [image]
-
@carnage4life
Dare Obasanjo
on bluesky
Wild to accidentally release the source code of your $2.5B ARR product, not once but twice in the past year.
-
@markriedl
Mark Riedl
on bluesky
Oh wow, Anthropic accidentally leaked Claude Code and it's been cloned and made public github.com/instructkr/c...
-
r/technology
r
on reddit
Anthropic accidentally exposes Claude Code source code
-
r/technews
r
on reddit
Entire Anthropic's Claude Code CLI source code leaks thanks to exposed map file | 512,000 lines of code that competitors and hobbyists will be studying for weeks.
-
r/technology
r
on reddit
Entire Claude Code CLI source code leaks thanks to exposed map file | 512,000 lines of code that competitors and hobbyists will be studying for weeks.
-
r/pwnhub
r
on reddit
Is claude code got leaked?
-
@bcherny
Boris Cherny
on x
@Dave_Does_AI @ns123abc Working around the clock to fix this. It's crazy to grow this fast, we're scaling up every service as quickly as possible. Thanks for bearing with us. Improvements landing daily and more on the way.
-
@alexeheath
Alex Heath
on x
A spokesperson told me today: “Earlier today, a Claude Code release included some internal source code. No sensitive customer data or credentials were involved or exposed. This was a release packaging issue caused by human error, not a security breach. We're rolling out measures
-
@bcherny
Boris Cherny
on x
@Rahatcodes 👋 This is one of the signals we use to figure out if people are having a good experience. We put it on a dashboard and call it the “fucks” chart
-
@ns123abc
Nik
on x
Claude code source code leak was a “human error” who would've thunk
-
@altryne
Alex Volkov
on x
Claude Code creator Boris Cherny does exactly what a company should be doing, calm, open replies about today's leak. Confirming that this wasn't an issue with @bunjavascript and was a ... developer error. Not AI agent, developer.
-
@bcherny
Boris Cherny
on x
@ns123abc 👋 it was human error. Our deploy process has a few manual steps, and we didn't do one of the steps correctly. We have landed a few improvements and are digging in to add more sanity checks. Like with any other incident, the counter-intuitive answer is to solve the probl…
-
@ns123abc
Nik
on x
Oh so that's why claude code source code got leaked. Now it all makes sense. [image]
-
@ivanleomk
Ivan Leo
on x
Did anthropic just decide to release claude code's entire source code since it got leaked lmao, their github repo is no longer private
-
@bcherny
Boris Cherny
on x
@wongmjane @BenLesh Mistakes happen. As a team, the important thing is to recognize it's never an individuals's fault — it's the process, the culture, or the infra. In this case, there was a manual deploy step that should have been better automated. Our team has made a few improv…
-
@joshearle
Josh
on x
is the human still with us?
-
@yuchenj_uw
Yuchen Jin
on x
I like how the Anthropic Claude Code team is being chill about the code leak. What's leaked is leaked. 70k forks, Python & Rust versions on GitHub, there's no way back. One thing is clear from reading the code: harness engineering is hard and deeply non-trivial. I think more
-
@bcherny
Boris Cherny
on x
@joshearle Yes, mistakes happen
-
@bcherny
Boris Cherny
on x
@stevekrouse 🫶I came up with the initial list, then a bunch of others contributed words also. This list has gone through many iterations!
-
@bcherny
Boris Cherny
on x
@itsolelehmann We're always experimenting with new ideas. 90% don't ship because we don't think they're good enough experiences. Still on the fence about this one — should we ship it?
-
@theprimeagen
@theprimeagen
on x
don't forget last time Anthropic, in their infinite PhD level wisdom, leaked their own source code (Feb 25) they DMCA'd all repos that had their code. Careful storing the code because Anthropic will have no mercy!
-
@bcherny
Boris Cherny
on x
@beeeeeeeegyoshi @stevekrouse Someone else asked for this but I think it's weird. You can add it to your thinking words via settings if you like, just ask Claude
-
@bcherny
Boris Cherny
on x
@JonathanKimXD @ns123abc No one was fired? It was an honest mistake, it happens
-
@doublepulsar.com
Kevin Beaumont
on bluesky
By human error do they mean ‘vibe coded using our own product error’ [embedded post]
-
@markmadsen
Mark Madsen
on bluesky
Using AI coding tools via an outside service is totally secure and we can all trust the vendors explicitly because they are experts and professionals. [embedded post]
-
@spavel
Pavel
on bluesky
The vibe coded vibe coder. You can now take a look for yourself how well the “our top engineers don't even write code anymore” company has fared.
-
@metacurity.com
Cynthia Brumfield
on bluesky
This combined with the Cisco source code theft equals a bad day for code security. [embedded post]