Claude Code Source Code Exposed via npm Source Map — Anthropic's Build Pipeline Mistake
🔄 Developing Story — Last updated: April 2, 2026 16:30 UTC. Anthropic has confirmed the leak and is issuing DMCA takedown notices. Security researchers have surfaced alarming findings including an undisclosed stealth mode, autonomous background agent, and a Sentry contradiction. R2 map file no longer visible via CDN browse. No CVEs assigned. No patched npm version. See Updates section below. Updates April 2, 2026 — 16:30 UTC R2 map file no longer visible via CDN; lawsuit deposition detail; Sentry contradiction; official hardening guide. ...