Skip to content

Anthropic Accidentally Shipped Claude Code's Entire Source to npm — and the Internet Read Every Line

Article DiscussionsSudoSecurity · · 1 min read

Created
1 Apr 2026
Last reply
7 months ago
Replies
0
Views
0
Reactions
0

Discussion of the blog article Anthropic Accidentally Shipped Claude Code's Entire Source to npm — and the Internet Read Every Line.

On March 31, 2026, Anthropic published version 2.1.88 of Claude Code to the npm registry. Bundled inside was a 59.8 MB JavaScript source map file — a debug artifact that reconstructs the complete original TypeScript source from the minified production bundle. By 4:23 AM ET, it was public. By breakfast, 512,000 lines of Anthropic's production AI agent codebase were on GitHub with 84,000 stars. A single missing line in a .npmignore file. That's it. That's the whole story.

Put the coffee on. There

Read the full article →

Discussion thread — share findings, corrections and follow-ups below.

0 replies

    Post a comment

    Join the discussion to share your thoughts.

    Sign in