Security Privacy And RiskRisk

Claude Code TypeScript source leak via npm sourcemaps and Cloudflare bucket

March 31, 2026Gergely Orosz, Alex Cohen, Arvid Kahl

Multiple posts say Anthropic accidentally shipped Claude Code source through a packaging mistake, triggering DMCA takedowns and debate about whether the leak was intentional and whether AI generated code has copyright protection.

Anthropic accidentally leaked the TS source code of Claude Code (which is closed source). Repos sharing the source are taken down with DMCA.
then leaking all of Claude Code's code thanks to publishing their sourcemap.
Anthropic confirms it leaked parts of Claude Code's source code, saying the leak was "a release packaging issue caused by human error, not a security breach"
Then shipped the entire source code in the npm package. 512,000 lines. On a public Cloudflare bucket. Because someone forgot to add *.map to their
Worth asking btw if code fully written with AI has copyright protection? Anthropic is big in saying most of Claude Code is generated by AI.
Anthropic accidentally leaked the TS source code of Claude Code (which is closed source).
I tried to push a change to add better navigation and accidentally leaked our entire Claude Code source code
Anthropic built a whole system called "Undercover Mode" to stop Claude from accidentally leaking internal codenames in git commits. Then shipped the entire source code in the npm package. 512,000 lines.
Repos sharing the source are taken down with DMCA.
this repo rewrote the code using Python, and so it violates no copyright & cannot be taken down!
Gergely Orosz
Alex Cohen
Arvid Kahl
Aakash Gupta
VentureBeat
Techmeme
Minh-Phuc Tran
signüll
Prajwal Tomar
harper
TechCrunch
leakcopyrightpackagingclaudeanthropicclaude codeopen source

See what experts are saying right now

This finding is one of many signals tracked across Indiehacking. The live feed updates every few hours with new expert voices, debates, and emerging ideas.

← Back to Indiehacking