Anthropic didn't mean to open-source Claude Code. But on Tuesday, the company effectively did—and not even an army of lawyers can put that toothpaste back in the tube.
It started with a single file. Claude Code version 2.1.88, pushed to the npm registry in the early hours of Tuesday morning, shipped with a 59.8MB JavaScript source map—a debug file that can reconstruct the original code from its compressed form. These files are generated automatically and are supposed to stay private. But a single line in the ignore settings let it go out with the release.
Claude code source code has been leaked via a map file in their npm registry!
"Earlier today, a Claude Code release included some internal source code. No sensitive customer data or credentials were involved or exposed," an Anthropic spokesperson told Decrypt. "This was a release packaging issue caused by human error, not a security breach. We're rolling out measures to prevent this from happening again."
The leak exposed the full internal architecture of what is arguably one of, if not the most sophisticated AI coding agent on the market: LLM API orchestration, multi-agent coordination, permission logic, OAuth flows, and 44 hidden feature flags covering unreleased functionality.
Apparently, Anthropic began issuing DMCA takedowns against GitHub mirrors. That's when things got interesting.
It’s basically a translation of all the code from the original language to Python, so technically not the same thing, right? We’ll leave that to lawyers and tech philosophers.
It's a clean-room rewrite. A new creative work. DMCA-proof by design.
This is either brilliant or scary:
Anthropic accidentally leaked the TS source code of Claude Code (which is closed source). Repos sharing the source are taken down with DMCA.
This matters beyond the drama. DMCA takedowns work against centralized platforms. GitHub complies because it has to. Decentralized infrastructure—which powers Gitlawb, torrents, and cryptocurrency itself—doesn't have the same single point of failure. When a company tries to pull something back from the internet, the only question is how many mirrors exist and on what kind of infrastructure. The answer here, within hours, was: enough.
