Claude code and 512000 Becoming Public

The Moment Every Engineer Knows You publish a package. Everything seems fine. Then someone on the internet discovers something you absolutely did not intend to ship. And suddenly half a million lines of your internal code are circulating on GitHub. That’s essentially what just happened with Claude Code , Anthropic’s command-line developer tool. What Actually Happened Anthropic released version 2.1.88 of the claude-code npm package. Inside the package there was a source map file . For people outside the frontend / JS ecosystem, a quick explanation: A source map is normally used to map compiled JavaScript back to the original TypeScript source files for debugging. But if the source map accidentally includes references to the original sources and the sources are embedded or accessible , anyone can reconstruct the entire codebase . And that’s exactly what happened. The result: ~ 2,000 TypeScript files ~ 512,000 lines of code internal architecture exposed instantly mirrored and forked acros