Entire Claude Code CLI source code leaks thanks to exposed map file
Key Points:
- Anthropic accidentally leaked the entire source code for its Claude Code command line interface application due to a release packaging error, exposing nearly 2,000 TypeScript files and over 512,000 lines of code.
- The leak was first identified by security researcher Chaofan Shou, and the code has since been widely distributed on GitHub, with tens of thousands of forks.
- Anthropic confirmed the incident was a human error with no customer data or credentials exposed, and they are implementing measures to prevent future occurrences.
- Developers have begun analyzing the leaked code in detail, revealing insights into Claude Code’s memory architecture and the complexity of its components, highlighting its sophisticated, production-grade design.
- The leak poses risks by providing competitors with architectural insights and potentially aiding bad actors in finding security vulnerabilities, though the fast-moving nature of the field makes the long-term impact uncertain.