Krux
April 8, 2026
Anthropic Leaks 512,000 Lines of Claude Code Twice in Two Months
Published: April 8, 2026 at 12:40 AM
Updated: April 8, 2026 at 12:40 AM
100-word summary
Anthropic accidentally published the entire source code for Claude Code's CLI in an npm package—512,000 lines across 1,900 TypeScript files. A packaging error left a 59.8 MB source map pointing to unobfuscated code on Anthropic's servers. GitHub mirrors appeared within hours. The leak exposed internal agent logic, memory management, and unreleased features. No customer data was compromised. But this is the second time in two months Anthropic has leaked Claude Code via sloppy npm releases, turning a packaging checklist into a national security question. Congress is now asking formal questions. Competitors just got a free roadmap to how Claude's multi-agent system actually works.
What happened
Anthropic accidentally published the entire source code for Claude Code's CLI in an npm package—512,000 lines across 1,900 TypeScript files. A packaging error left a 59.8 MB source map pointing to unobfuscated code on Anthropic's servers. GitHub mirrors appeared within hours. The leak exposed internal agent logic, memory management, and unreleased features. No customer data was compromised. But this is the second time in two months Anthropic has leaked Claude Code via sloppy npm releases, turning a packaging checklist into a national security question. Congress is now asking formal questions.
Why it matters
Competitors just got a free roadmap to how Claude's multi-agent system actually works.