Claude Releases Source Code
anthropic claude
| Source: HN | Original article
Anthropic's Claude Code npm package exposed its full TypeScript source via .js.map files, prompting a detailed analysis compiled into a new book.
Anthropic’s Claude Code, the company’s AI‑powered coding assistant, has been exposed in its entirety after a mis‑configured npm package left the full TypeScript source in the published source‑map files. Researchers who examined the .js.map files were able to reconstruct the tool’s architecture, prompting a community‑driven effort to publish the recovered code on GitHub and to distil the findings into a 400‑page technical book that walks engineers through the patterns and trade‑offs behind the agent.
The leak matters for several reasons. First, it gives competitors and independent developers unprecedented insight into Anthropic’s internal design choices, potentially accelerating the creation of rival tools or forks that could erode Claude Code’s market advantage. Second, the accidental disclosure raises fresh security concerns: the same source‑map oversight that revealed the code could also expose undocumented endpoints or credential handling logic, echoing recent incidents where Anthropic‑based agents were leveraged in attacks on OpenAI. Finally, the open‑source community’s rapid response—publishing a curated collection of the recovered files and a step‑by‑step installation guide—demonstrates how quickly proprietary AI tooling can become publicly analyzable once build artefacts are mishandled.
Looking ahead, observers will watch how Anthropic reacts. The company may issue a patch, tighten its publishing pipeline, or even embrace the community interest by open‑sourcing Claude Code officially. Meanwhile, developers adopting the tool should audit the leaked code for hidden vulnerabilities and consider alternative agents until Anthropic clarifies the security posture of its CLI. The episode also underscores the broader need for rigorous supply‑chain hygiene in AI software distribution. As we reported on Sep 18, Claude Code was recently relaunched with cloud‑agent management features; this source‑code exposure adds a new dimension to the platform’s evolving story.
Sources
Back to AIPULSEN