Anthropic accidentally leaked the source code for its Claude Code AI assistant, including 1,900 files and 500,000 lines of code, when version 2.1.88 was published to NPM with an embedded source map file. The company confirmed no customer data or credentials were exposed, attributing it to human error during release packaging.
Initial Access
Internal Packaging Error
confirmed
A human error during the release packaging process caused internal source code to be included in the Claude Code version 2.1.88 NPM package.
Defender cut points
Implement automated build and release pipelines with strict content validation.Enforce code review for package contents before public distribution.
