{"id":77195,"date":"2026-03-31T14:47:32","date_gmt":"2026-03-31T11:47:32","guid":{"rendered":"https:\/\/saudishopper.com.sa\/en\/claude-code-source-leak-npm-source-map\/"},"modified":"2026-05-12T17:43:06","modified_gmt":"2026-05-12T14:43:06","slug":"claude-code-source-leak-npm-source-map","status":"publish","type":"post","link":"https:\/\/saudishopper.com.sa\/en\/claude-code-source-leak-npm-source-map\/","title":{"rendered":"Claude Code Source Code Leaked via npm Source Map: 1,900 Files, 512,000+ Lines Exposed"},"content":{"rendered":"<p class=\"wp-block-paragraph\">The Claude Code source leak sent shockwaves through the developer community on March 31, 2026, when security researcher Chaofan Shou discovered that Anthropic&#8217;s flagship agentic CLI tool had its entire proprietary codebase accidentally exposed through a source map file published to the public npm registry. The leaked codebase \u2014 spanning nearly 1,900 TypeScript files and over 512,000 lines of code \u2014 was rapidly archived to a public GitHub repository, surpassing 1,100 stars and 1,900 forks within hours of discovery.<\/p><h2 class=\"wp-block-heading\">What Is Claude Code?<\/h2><p class=\"wp-block-paragraph\">Claude Code is Anthropic&#8217;s official command-line interface (CLI) that lets developers interact with <a href=\"\/category\/ai\/\">artificial intelligence<\/a> models directly from their terminal for software engineering tasks. It functions as an AI pair programmer capable of editing files, running shell commands, searching codebases, and managing Git workflows \u2014 all through natural language instructions. Far from a simple chat wrapper, the leaked source reveals a deeply engineered, production-grade system built on <strong>Bun<\/strong> (not Node.js), using <strong>React with Ink<\/strong> for terminal UI rendering, and <strong>Zod v4<\/strong> for schema validation across tool inputs, API responses, and config files.<\/p><h2 class=\"wp-block-heading\">How the Claude Code Source Leak Happened<\/h2><p class=\"wp-block-paragraph\">The root cause was a misconfigured build pipeline that accidentally included a <code>.map<\/code> source map file in the published npm package. Source maps are debugging tools that map minified JavaScript back to the original, human-readable source code. When included in a production npm package, they effectively ship the entire original codebase in readable form to anyone who downloads the package. This was not the first incident \u2014 earlier in 2025, versions v0.2.8 and v0.2.28 were also accidentally shipped with full source maps. Anthropic quickly removed those versions, but cached copies remained accessible. One developer even recovered the source map using Sublime Text&#8217;s undo history after Anthropic wiped the cached npm files. For more on <a href=\"\/category\/cybersecurity\/\">cybersecurity<\/a> risks in software supply chains, this incident is a textbook case study.<\/p><blockquote class=\"wp-block-quote is-layout-flow wp-block-quote-is-layout-flow\"><p>&#8220;A single misconfigured .npmignore or files field in package.json can expose an entire proprietary codebase to the public.&#8221;<\/p><cite>Gabriel Anhaia, Developer &#038; Security Analyst, dev.to<\/cite><\/blockquote><h2 class=\"wp-block-heading\">What the Leaked Source Code Reveals<\/h2><p class=\"wp-block-paragraph\">The codebase offers a rare, detailed look at how a frontier <a href=\"\/category\/ai\/\">AI<\/a> coding tool is architected at scale. The tool system alone comprises approximately 40 built-in, permission-gated tools \u2014 including <code>Read<\/code>, <code>Write<\/code>, <code>Edit<\/code>, <code>Bash<\/code>, <code>Grep<\/code>, <code>WebFetch<\/code>, and <code>Agent<\/code> \u2014 with the base tool definition spanning 29,000 lines of TypeScript. The query engine, at 46,000 lines, handles all LLM API calls, streaming, caching, and orchestration. Multi-agent orchestration allows Claude Code to spawn sub-agents (internally called &#8220;swarms&#8221;) to handle complex, parallelizable tasks. A bidirectional IDE bridge connects VS Code and JetBrains extensions via JWT-authenticated channels, and a file-based persistent memory system stores user context across sessions. The source also revealed quirky easter eggs: a random array of loading messages including &#8220;Clauding,&#8221; &#8220;Vibing,&#8221; and &#8220;Honking,&#8221; plus a hidden <code>\/stickers<\/code> tool that lets users request Anthropic swag by mail. Developers examining the code on <a href=\"https:\/\/news.ycombinator.com\/item?id=47584540\" target=\"_blank\" rel=\"noopener\">Hacker News<\/a> also noted approximately 50 slash commands, lazy-loaded modules for heavy dependencies, and some code quality concerns including repeated ad-hoc hash function implementations and extensive use of <code>process.argv<\/code> throughout the codebase.<\/p><h2 class=\"wp-block-heading\">Anthropic&#8217;s Response<\/h2><p class=\"wp-block-paragraph\">Upon discovering the Claude Code source leak, Anthropic rapidly pushed an update to remove the source map from the published package and unpublished the affected versions from the npm registry. However, the code had already been mirrored, forked, and archived across GitHub before the takedown. Whether Anthropic pursues legal action against those hosting mirrors remains to be seen, but the architectural patterns \u2014 tool systems, permission gates, multi-agent spawning \u2014 are now part of the public discourse on how to build agentic <a href=\"\/category\/apps\/\">AI applications<\/a>.<\/p><h2 class=\"wp-block-heading\">Key Lessons for Every Engineering Team<\/h2><p class=\"wp-block-paragraph\">This incident is a critical reminder for any team publishing npm packages. First, run <code>npm pack --dry-run<\/code> before every release to verify exactly what files are being published. Second, source maps are source code \u2014 never include <code>.map<\/code> files in production packages unless intentional. Third, audit your <code>.npmignore<\/code> and <code>package.json<\/code> <code>files<\/code> field carefully. Fourth, react quickly \u2014 Anthropic&#8217;s fast response reduced further spread, but could not undo what was already cached. Fifth, assume public once published: npm packages, once live, can be downloaded globally within seconds. The incident also inadvertently reveals just how high the engineering bar is for production <a href=\"\/category\/ai\/\">AI coding tools<\/a> in 2026 \u2014 industrial-grade permission systems, multi-agent orchestration, IDE integrations, and persistent memory far beyond what most assumed was under the hood.<\/p><p class=\"wp-block-paragraph\"><em>All source code referenced in this article is the intellectual property of Anthropic, PBC. This article is published for informational and educational purposes only.<\/em><\/p>","protected":false},"excerpt":{"rendered":"<p>Anthropic&#8217;s Claude Code had its entire source code \u2014 1,900 files and 512,000+ lines \u2014 accidentally exposed via a source map file in the npm registry. Here&#8217;s what was inside and what every developer should learn from it.<\/p>\n","protected":false},"author":16,"featured_media":77194,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_yoast_wpseo_meta-robots-noindex":"","_et_pb_use_builder":"","_et_pb_old_content":"","_et_gb_content_width":"","_pr_autopilot_social_copy":"{\"x_hook\":\"Anthropic's Claude Code just had its entire proprietary source code accidentally exposed \u2014 1,900 TypeScript files and 512,000+ lines \u2014 through a misconfigured npm source map file. The developer community is stunned by what's inside.\",\"x_takeaways\":\"Key Details:\\n\ud83d\udd39 Root cause: a .map source map file accidentally included in the npm package, exposing the full readable codebase\\n\ud83d\udd39 Inside: ~40 permission-gated tools, a 46K-line query engine, multi-agent orchestration, IDE bridge, and persistent memory\\n\ud83d\udd39 Lesson: always run npm pack --dry-run before publishing and never ship .map files in production packages\"}","_yoast_wpseo_opengraph_title":"Claude Code Source Code Leaked via npm Source Map: 512,000+ Lines Exposed","_yoast_wpseo_opengraph_description":"Security researcher Chaofan Shou discovered Anthropic's entire Claude Code codebase exposed through a source map file in the npm registry. The 1,900-file, 512,000-line leak reveals multi-agent orchestration, IDE bridges, persistent memory, and more.","_yoast_wpseo_opengraph_image":"https:\/\/saudishopper.com.sa\/en\/wp-content\/uploads\/2026\/03\/claude-code-source-leak-npm-source-map.webp","_yoast_wpseo_opengraph_image_id":77194,"_yoast_wpseo_twitter_title":"Claude Code Source Leaked via npm \u2014 512K Lines Exposed","_yoast_wpseo_twitter_description":"Anthropic's Claude Code had its entire proprietary source code accidentally exposed via a misconfigured npm source map. 1,900 files. 512,000+ lines. Here's what's inside.","_yoast_wpseo_twitter_image":"https:\/\/saudishopper.com.sa\/en\/wp-content\/uploads\/2026\/03\/claude-code-source-leak-npm-source-map.webp","_yoast_wpseo_twitter_image_id":77194,"_yoast_wpseo_primary_category":449,"_extra_hide_author_box":"","_extra_featured_post":"","_partner_post_id":106461,"footnotes":""},"categories":[442,449,439],"tags":[2803,1467,2918,2987,2988],"class_list":["post-77195","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-apps","category-ai","category-cybersecurity","tag-ai-coding-tools","tag-anthropic","tag-claude-code","tag-npm","tag-source-map","et-has-post-format-content","et_post_format-et-post-format-standard"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.7 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Claude Code source leak - npm Exposes 512K Lines | Saudi Shopper<\/title>\n<meta name=\"description\" content=\"Claude Code source leak: Anthropic&#039;s CLI tool exposed 1,900 TypeScript files via a misconfigured npm source map. What&#039;s inside and what developers must do now.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/saudishopper.com.sa\/en\/claude-code-source-leak-npm-source-map\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Claude Code source leak - npm Exposes 512K Lines | Saudi Shopper\" \/>\n<meta property=\"og:description\" content=\"Claude Code source leak: Anthropic&#039;s CLI tool exposed 1,900 TypeScript files via a misconfigured npm source map. What&#039;s inside and what developers must do now.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/saudishopper.com.sa\/en\/claude-code-source-leak-npm-source-map\/\" \/>\n<meta property=\"og:site_name\" content=\"Saudishopper\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/SaudiShopper\" \/>\n<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/zamil\" \/>\n<meta property=\"article:published_time\" content=\"2026-03-31T11:47:32+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2026-05-12T14:43:06+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/saudishopper.com.sa\/en\/wp-content\/uploads\/2026\/03\/claude-code-source-leak-npm-source-map.webp\" \/>\n\t<meta property=\"og:image:width\" content=\"1200\" \/>\n\t<meta property=\"og:image:height\" content=\"628\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/webp\" \/>\n<meta name=\"author\" content=\"Zamil Safwan\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@zsafwan\" \/>\n<meta name=\"twitter:site\" content=\"@ssict\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Zamil Safwan\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"4 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/saudishopper.com.sa\\\/en\\\/claude-code-source-leak-npm-source-map\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/saudishopper.com.sa\\\/en\\\/claude-code-source-leak-npm-source-map\\\/\"},\"author\":{\"name\":\"Zamil Safwan\",\"@id\":\"https:\\\/\\\/saudishopper.com.sa\\\/en\\\/#\\\/schema\\\/person\\\/8351552105da6d5a684fb7e010f12047\"},\"headline\":\"Claude Code Source Code Leaked via npm Source Map: 1,900 Files, 512,000+ Lines Exposed\",\"datePublished\":\"2026-03-31T11:47:32+00:00\",\"dateModified\":\"2026-05-12T14:43:06+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/saudishopper.com.sa\\\/en\\\/claude-code-source-leak-npm-source-map\\\/\"},\"wordCount\":732,\"publisher\":{\"@id\":\"https:\\\/\\\/saudishopper.com.sa\\\/en\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/saudishopper.com.sa\\\/en\\\/claude-code-source-leak-npm-source-map\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/saudishopper.com.sa\\\/en\\\/wp-content\\\/uploads\\\/2026\\\/03\\\/claude-code-source-leak-npm-source-map.webp\",\"keywords\":[\"AI Coding Tools\",\"Anthropic\",\"Claude Code\",\"npm\",\"source map\"],\"articleSection\":[\"Apps &amp; Software\",\"Artificial Intelligence\",\"Cybersecurity\"],\"inLanguage\":\"en-US\",\"copyrightYear\":\"2026\",\"copyrightHolder\":{\"@id\":\"https:\\\/\\\/saudishopper.com.sa\\\/en\\\/#organization\"}},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/saudishopper.com.sa\\\/en\\\/claude-code-source-leak-npm-source-map\\\/\",\"url\":\"https:\\\/\\\/saudishopper.com.sa\\\/en\\\/claude-code-source-leak-npm-source-map\\\/\",\"name\":\"Claude Code source leak - npm Exposes 512K Lines | Saudi Shopper\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/saudishopper.com.sa\\\/en\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/saudishopper.com.sa\\\/en\\\/claude-code-source-leak-npm-source-map\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/saudishopper.com.sa\\\/en\\\/claude-code-source-leak-npm-source-map\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/saudishopper.com.sa\\\/en\\\/wp-content\\\/uploads\\\/2026\\\/03\\\/claude-code-source-leak-npm-source-map.webp\",\"datePublished\":\"2026-03-31T11:47:32+00:00\",\"dateModified\":\"2026-05-12T14:43:06+00:00\",\"description\":\"Claude Code source leak: Anthropic's CLI tool exposed 1,900 TypeScript files via a misconfigured npm source map. What's inside and what developers must do now.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/saudishopper.com.sa\\\/en\\\/claude-code-source-leak-npm-source-map\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/saudishopper.com.sa\\\/en\\\/claude-code-source-leak-npm-source-map\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/saudishopper.com.sa\\\/en\\\/claude-code-source-leak-npm-source-map\\\/#primaryimage\",\"url\":\"https:\\\/\\\/saudishopper.com.sa\\\/en\\\/wp-content\\\/uploads\\\/2026\\\/03\\\/claude-code-source-leak-npm-source-map.webp\",\"contentUrl\":\"https:\\\/\\\/saudishopper.com.sa\\\/en\\\/wp-content\\\/uploads\\\/2026\\\/03\\\/claude-code-source-leak-npm-source-map.webp\",\"width\":1200,\"height\":628,\"caption\":\"Claude Code source leak \u2014 cracked padlock over a terminal screen with cascading TypeScript code\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/saudishopper.com.sa\\\/en\\\/claude-code-source-leak-npm-source-map\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/saudishopper.com.sa\\\/en\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Claude Code Source Code Leaked via npm Source Map: 1,900 Files, 512,000+ Lines Exposed\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/saudishopper.com.sa\\\/en\\\/#website\",\"url\":\"https:\\\/\\\/saudishopper.com.sa\\\/en\\\/\",\"name\":\"Saudishopper\",\"description\":\"Saudi ICT Shopper News\",\"publisher\":{\"@id\":\"https:\\\/\\\/saudishopper.com.sa\\\/en\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/saudishopper.com.sa\\\/en\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/saudishopper.com.sa\\\/en\\\/#organization\",\"name\":\"Saudi ICT News\",\"alternateName\":\"Saudi ICT Shopper News\",\"url\":\"https:\\\/\\\/saudishopper.com.sa\\\/en\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/saudishopper.com.sa\\\/en\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/saudishopper.com.sa\\\/en\\\/wp-content\\\/uploads\\\/2020\\\/08\\\/SSTrans.png\",\"contentUrl\":\"https:\\\/\\\/saudishopper.com.sa\\\/en\\\/wp-content\\\/uploads\\\/2020\\\/08\\\/SSTrans.png\",\"width\":423,\"height\":165,\"caption\":\"Saudi ICT News\"},\"image\":{\"@id\":\"https:\\\/\\\/saudishopper.com.sa\\\/en\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/www.facebook.com\\\/SaudiShopper\",\"https:\\\/\\\/x.com\\\/ssict\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/saudishopper.com.sa\\\/en\\\/#\\\/schema\\\/person\\\/8351552105da6d5a684fb7e010f12047\",\"name\":\"Zamil Safwan\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/a483a8920db50e1d6142462856d7925f4a9543091c79df709d1380ea7fbef8ec?s=96&d=https%3A%2F%2Fsaudishopper.com.sa%2Fen%2Fwp-content%2Fuploads%2F2020%2F12%2Fcropped-ss-icon--150x150.png&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/a483a8920db50e1d6142462856d7925f4a9543091c79df709d1380ea7fbef8ec?s=96&d=https%3A%2F%2Fsaudishopper.com.sa%2Fen%2Fwp-content%2Fuploads%2F2020%2F12%2Fcropped-ss-icon--150x150.png&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/a483a8920db50e1d6142462856d7925f4a9543091c79df709d1380ea7fbef8ec?s=96&d=https%3A%2F%2Fsaudishopper.com.sa%2Fen%2Fwp-content%2Fuploads%2F2020%2F12%2Fcropped-ss-icon--150x150.png&r=g\",\"caption\":\"Zamil Safwan\"},\"description\":\"An experienced technologist with expertise spanning Digital Transformation, E-commerce, Start-ups, and Fintech. Zamil offers insightful analysis on the convergence of finance and technology in the evolving digital landscape.\",\"sameAs\":[\"https:\\\/\\\/zsafwan.net\",\"https:\\\/\\\/www.facebook.com\\\/zamil\",\"https:\\\/\\\/x.com\\\/@zsafwan\"],\"url\":\"https:\\\/\\\/saudishopper.com.sa\\\/en\\\/author\\\/zamil\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Claude Code source leak - npm Exposes 512K Lines | Saudi Shopper","description":"Claude Code source leak: Anthropic's CLI tool exposed 1,900 TypeScript files via a misconfigured npm source map. What's inside and what developers must do now.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/saudishopper.com.sa\/en\/claude-code-source-leak-npm-source-map\/","og_locale":"en_US","og_type":"article","og_title":"Claude Code source leak - npm Exposes 512K Lines | Saudi Shopper","og_description":"Claude Code source leak: Anthropic's CLI tool exposed 1,900 TypeScript files via a misconfigured npm source map. What's inside and what developers must do now.","og_url":"https:\/\/saudishopper.com.sa\/en\/claude-code-source-leak-npm-source-map\/","og_site_name":"Saudishopper","article_publisher":"https:\/\/www.facebook.com\/SaudiShopper","article_author":"https:\/\/www.facebook.com\/zamil","article_published_time":"2026-03-31T11:47:32+00:00","article_modified_time":"2026-05-12T14:43:06+00:00","og_image":[{"width":1200,"height":628,"url":"https:\/\/saudishopper.com.sa\/en\/wp-content\/uploads\/2026\/03\/claude-code-source-leak-npm-source-map.webp","type":"image\/webp"}],"author":"Zamil Safwan","twitter_card":"summary_large_image","twitter_creator":"@zsafwan","twitter_site":"@ssict","twitter_misc":{"Written by":"Zamil Safwan","Est. reading time":"4 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/saudishopper.com.sa\/en\/claude-code-source-leak-npm-source-map\/#article","isPartOf":{"@id":"https:\/\/saudishopper.com.sa\/en\/claude-code-source-leak-npm-source-map\/"},"author":{"name":"Zamil Safwan","@id":"https:\/\/saudishopper.com.sa\/en\/#\/schema\/person\/8351552105da6d5a684fb7e010f12047"},"headline":"Claude Code Source Code Leaked via npm Source Map: 1,900 Files, 512,000+ Lines Exposed","datePublished":"2026-03-31T11:47:32+00:00","dateModified":"2026-05-12T14:43:06+00:00","mainEntityOfPage":{"@id":"https:\/\/saudishopper.com.sa\/en\/claude-code-source-leak-npm-source-map\/"},"wordCount":732,"publisher":{"@id":"https:\/\/saudishopper.com.sa\/en\/#organization"},"image":{"@id":"https:\/\/saudishopper.com.sa\/en\/claude-code-source-leak-npm-source-map\/#primaryimage"},"thumbnailUrl":"https:\/\/saudishopper.com.sa\/en\/wp-content\/uploads\/2026\/03\/claude-code-source-leak-npm-source-map.webp","keywords":["AI Coding Tools","Anthropic","Claude Code","npm","source map"],"articleSection":["Apps &amp; Software","Artificial Intelligence","Cybersecurity"],"inLanguage":"en-US","copyrightYear":"2026","copyrightHolder":{"@id":"https:\/\/saudishopper.com.sa\/en\/#organization"}},{"@type":"WebPage","@id":"https:\/\/saudishopper.com.sa\/en\/claude-code-source-leak-npm-source-map\/","url":"https:\/\/saudishopper.com.sa\/en\/claude-code-source-leak-npm-source-map\/","name":"Claude Code source leak - npm Exposes 512K Lines | Saudi Shopper","isPartOf":{"@id":"https:\/\/saudishopper.com.sa\/en\/#website"},"primaryImageOfPage":{"@id":"https:\/\/saudishopper.com.sa\/en\/claude-code-source-leak-npm-source-map\/#primaryimage"},"image":{"@id":"https:\/\/saudishopper.com.sa\/en\/claude-code-source-leak-npm-source-map\/#primaryimage"},"thumbnailUrl":"https:\/\/saudishopper.com.sa\/en\/wp-content\/uploads\/2026\/03\/claude-code-source-leak-npm-source-map.webp","datePublished":"2026-03-31T11:47:32+00:00","dateModified":"2026-05-12T14:43:06+00:00","description":"Claude Code source leak: Anthropic's CLI tool exposed 1,900 TypeScript files via a misconfigured npm source map. What's inside and what developers must do now.","breadcrumb":{"@id":"https:\/\/saudishopper.com.sa\/en\/claude-code-source-leak-npm-source-map\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/saudishopper.com.sa\/en\/claude-code-source-leak-npm-source-map\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/saudishopper.com.sa\/en\/claude-code-source-leak-npm-source-map\/#primaryimage","url":"https:\/\/saudishopper.com.sa\/en\/wp-content\/uploads\/2026\/03\/claude-code-source-leak-npm-source-map.webp","contentUrl":"https:\/\/saudishopper.com.sa\/en\/wp-content\/uploads\/2026\/03\/claude-code-source-leak-npm-source-map.webp","width":1200,"height":628,"caption":"Claude Code source leak \u2014 cracked padlock over a terminal screen with cascading TypeScript code"},{"@type":"BreadcrumbList","@id":"https:\/\/saudishopper.com.sa\/en\/claude-code-source-leak-npm-source-map\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/saudishopper.com.sa\/en\/"},{"@type":"ListItem","position":2,"name":"Claude Code Source Code Leaked via npm Source Map: 1,900 Files, 512,000+ Lines Exposed"}]},{"@type":"WebSite","@id":"https:\/\/saudishopper.com.sa\/en\/#website","url":"https:\/\/saudishopper.com.sa\/en\/","name":"Saudishopper","description":"Saudi ICT Shopper News","publisher":{"@id":"https:\/\/saudishopper.com.sa\/en\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/saudishopper.com.sa\/en\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/saudishopper.com.sa\/en\/#organization","name":"Saudi ICT News","alternateName":"Saudi ICT Shopper News","url":"https:\/\/saudishopper.com.sa\/en\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/saudishopper.com.sa\/en\/#\/schema\/logo\/image\/","url":"https:\/\/saudishopper.com.sa\/en\/wp-content\/uploads\/2020\/08\/SSTrans.png","contentUrl":"https:\/\/saudishopper.com.sa\/en\/wp-content\/uploads\/2020\/08\/SSTrans.png","width":423,"height":165,"caption":"Saudi ICT News"},"image":{"@id":"https:\/\/saudishopper.com.sa\/en\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/SaudiShopper","https:\/\/x.com\/ssict"]},{"@type":"Person","@id":"https:\/\/saudishopper.com.sa\/en\/#\/schema\/person\/8351552105da6d5a684fb7e010f12047","name":"Zamil Safwan","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/a483a8920db50e1d6142462856d7925f4a9543091c79df709d1380ea7fbef8ec?s=96&d=https%3A%2F%2Fsaudishopper.com.sa%2Fen%2Fwp-content%2Fuploads%2F2020%2F12%2Fcropped-ss-icon--150x150.png&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/a483a8920db50e1d6142462856d7925f4a9543091c79df709d1380ea7fbef8ec?s=96&d=https%3A%2F%2Fsaudishopper.com.sa%2Fen%2Fwp-content%2Fuploads%2F2020%2F12%2Fcropped-ss-icon--150x150.png&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/a483a8920db50e1d6142462856d7925f4a9543091c79df709d1380ea7fbef8ec?s=96&d=https%3A%2F%2Fsaudishopper.com.sa%2Fen%2Fwp-content%2Fuploads%2F2020%2F12%2Fcropped-ss-icon--150x150.png&r=g","caption":"Zamil Safwan"},"description":"An experienced technologist with expertise spanning Digital Transformation, E-commerce, Start-ups, and Fintech. Zamil offers insightful analysis on the convergence of finance and technology in the evolving digital landscape.","sameAs":["https:\/\/zsafwan.net","https:\/\/www.facebook.com\/zamil","https:\/\/x.com\/@zsafwan"],"url":"https:\/\/saudishopper.com.sa\/en\/author\/zamil\/"}]}},"_links":{"self":[{"href":"https:\/\/saudishopper.com.sa\/en\/wp-json\/wp\/v2\/posts\/77195","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/saudishopper.com.sa\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/saudishopper.com.sa\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/saudishopper.com.sa\/en\/wp-json\/wp\/v2\/users\/16"}],"replies":[{"embeddable":true,"href":"https:\/\/saudishopper.com.sa\/en\/wp-json\/wp\/v2\/comments?post=77195"}],"version-history":[{"count":1,"href":"https:\/\/saudishopper.com.sa\/en\/wp-json\/wp\/v2\/posts\/77195\/revisions"}],"predecessor-version":[{"id":77196,"href":"https:\/\/saudishopper.com.sa\/en\/wp-json\/wp\/v2\/posts\/77195\/revisions\/77196"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/saudishopper.com.sa\/en\/wp-json\/wp\/v2\/media\/77194"}],"wp:attachment":[{"href":"https:\/\/saudishopper.com.sa\/en\/wp-json\/wp\/v2\/media?parent=77195"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/saudishopper.com.sa\/en\/wp-json\/wp\/v2\/categories?post=77195"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/saudishopper.com.sa\/en\/wp-json\/wp\/v2\/tags?post=77195"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}