BUDDY, KAIROS, Dream Mode: What Anthropic's Claude Code Source Leak Actually Revealed
Sometimes the most revealing leaks aren’t the ones attackers engineer — they’re the ones that happen because someone forgot to add a line to .npmignore. That’s exactly what happened with Anthropic’s Claude Code v2.1.88. A developer named Chaofan Shou noticed that the npm package included a file it really, really shouldn’t have: main.js.map — a source map that, by design, contains a complete reconstruction of the original source code. By the time Anthropic patched it, GitHub mirrors had already spread. The community had 512,000 lines of TypeScript to dig through, and dig they did. ...