Claude Code 源代码意外泄露于 NPM 包中

Anthropic recently faced a significant incident involving the accidental leak of the source code for its closed-source tool, Claude Code. This exposure occurred when version 2.1.88 was published to NPM, containing a large source map file (cli.js.map) with embedded source content. Researchers were able to reconstruct approximately 1,900 files and 500,000 lines of code, revealing internal details and upcoming features such as 'Proactive mode' and 'Dream mode.' While Anthropic clarified that the incident resulted from a release packaging error rather than a security breach and that no customer data was exposed, the company is actively issuing DMCA notices to mitigate the spread of the code. Additionally, Anthropic is investigating a separate 'usage bug' in Claude Code.