Claude Code's source code appears to have leaked
Digest more
The exposure traces back to version 2.1.88 of the @anthropic-ai/claude-code package on npm, which was published with a 59.8MB JavaScript source map intended only for internal
WTF?” “Dammit!” “Now I’m really annoyed.” Cursing out a flailing AI helper is something we’ve all done, but it turns out one of the most popular Claude tools is actively checking our messages for specific signs of frustration—including swear words.
A simple prompt sent Claude Code on a mission that uncovered major security vulnerabilities in popular text editors — and then suggested ways to exploit them.