Entire Claude Code CLI source code leaks thanks to exposed map file

In a significant blunder, Anthropic has inadvertently leaked the complete source code for its Claude Code command line interface application. This incident, triggered by an internal error, has sent shockwaves through the tech community, offering rivals and enthusiasts an unprecedented glimpse into the inner workings of Claude Code. The leak occurred early this morning when Anthropic released version 2.1.88 of the Claude Code npm package, which mistakenly included a source map file. This file granted access to nearly 2,000 TypeScript files and over 512,000 lines of code, providing a detailed blueprint of the application. Security researcher Chaofan Shou was the first to highlight the issue on X, sharing a link to an archive containing the exposed files. Following this, the codebase was uploaded to a public GitHub repository, where it has been forked by tens of thousands of users. In response to the incident, Anthropic issued a statement acknowledging the mistake. They clarified that the leak did not compromise any sensitive customer data or credentials. The company attributed the mishap to a packaging error rather than a security breach and assured users that they are implementing measures to prevent similar occurrences in the future. Developers have wasted no time in dissecting the leaked code, with some already providing insights into Claude Code’s memory architecture. Notably, a user on X, @himanshustwtson, shared a comprehensive analysis detailing features such as background memory rewriting and the various procedures to validate memory before utilization.