Anthropic Accidentally Shipped Claude Code's Entire Source to npm — and the Internet Read Every Line
On March 31, 2026, Anthropic published version 2.1.88 of Claude Code to the npm registry. Bundled inside was a 59.8 MB JavaScript source map file
Software Development
Engineering practice, tooling, open source and databases — how good software gets designed, reviewed and shipped.
✓ 2 approvals · 214 tests passed · coverage 91%
$ ls -t ~/software-development
On March 31, 2026, Anthropic published version 2.1.88 of Claude Code to the npm registry. Bundled inside was a 59.8 MB JavaScript source map file
Linux 7.0 RC6 landed with more fixes than Torvalds wants to see this late in the cycle, and RC5's calm turned out to be a mirage. He's not panicking yet — but he's also not making promises about the release date, and he suspects better AI coding tools might be partly responsible for the noise.
Amazon fired 1,800+ engineers while forcing staff onto its Kiro AI tool. Here's why that's a cybersecurity disaster waiting to happen — and what it means for every developer.
OpenAI is building a GitHub competitor — a technical breakdown of Git internals, version control history, and what this move signals about OpenAI's strategy.
Learn how to use AI coding tools like GitHub Copilot and Cursor to speed up development, cut boilerplate, and ship faster — without becoming dependent on the machine.
Your server dropped to 12 TPS. You copied Aikar's flags. You upgraded Java. Nothing changed. That's because JVM flags don't fix plugin bugs. Here's how to find what's actually killing your tick budget.
MariaDB vs MySQL in 2026 — what the Oracle acquisition changed, what MariaDB has been quietly building, and whether the fork is now the better choice.
C# 14's most significant new features explained — what changed, why it matters, and why the language that used to mean enterprise bloat is now genuinely good.
JDK 26's ten targeted features explained — what's shipping, what it means for production Java, and why the language keeps reshaping the terrain while you're not watching.
RSA-2048 can be broken with fewer than 100,000 qubits. What that means for TLS, certificate infrastructure, and the post-quantum transition already underway.
How Stack Overflow went from the most useful site for developers to something people actively avoid — and what AI replacing it actually means.
Your application is only as secure as every package it depends on. In September 2025, attackers compromised 27 npm packages with 2.6 billion weekly downloads by phishing one maintainer.
$ ssh community@sudosecurity
Ask in the forums, share a snippet, or work through a course on Learn.