On March 31, 2026, developers discovered that the @anthropic-ai/claude-code package on npm accidentally included a cli.js.map file-a source map revealing the entire TypeScript repository behind Claude Code’s client interface. The leak amounts to roughly 512,000 lines across 1,900 files, containing system prompts, secret environment variables, and hidden feature flags. Importantly, this breach exposes only the […]

