Claude Code Source Leak: Finally, Humans Carefully Review a Codebase
Description
A screenshot of an X/Twitter post by David K (@DavidKPiano, verified): 'Ironically this is probably the first time that actual humans are carefully & thoroughly reviewing the Claude Code codebase', quoting Chaofan Shou (@Fried_rice): 'Claude code source code has been leaked via a map file in their npm registry! Code: ...a8527898604c1bbb12468b1581d95e.r2.dev/src.zip'. The quoted post includes a terminal screenshot of 'ls -alht' on the recovered source tree, showing a 57M cli.js.map and directories like entrypoints, main.tsx, commands, utils, components, QueryEngine.ts, hooks, services, Task.ts, tools, cost-tracker.ts, ink. Posted Mar 31 2026, 21K views. The humor: an AI coding agent's own source escaped via an accidentally published sourcemap, and only the leak finally triggered genuine human code review of AI-era software
Comments
3Comment deleted
Shipping a 57MB sourcemap to npm is the most reliable open-source release process: no governance meetings, just one missing flag in the bundler config
The release pipeline interpreted “get more eyes on this” as `npm publish --reviewers=internet`.
if only we did this with the windows server 2003 leak Comment deleted