Apr 01, 2026 • [email protected] (The Hacker News)
Claude Code Source Leaked via npm Packaging Error, Anthropic Confirms
Anthropic confirmed that internal source code for its Claude Code AI coding assistant was inadvertently published to npm due to a human error during the...
Executive Summary
Anthropic confirmed that internal source code for its Claude Code AI coding assistant was inadvertently published to npm due to a human error during the release packaging process. The company stated that no sensitive customer data, credentials, or proprietary AI model weights were exposed in the incident. The leak originated from an internal mistake rather than malicious activity or a security breach. Anthropic acted quickly to remove the exposed code from the npm registry. Organizations using Claude Code or similar AI development tools should ensure their own internal release processes include proper access controls and verification steps to prevent accidental exposures. This incident highlights the importance of rigorous release management procedures even for internal tooling.
Summary
Anthropic on Tuesday confirmed that internal code for its popular artificial intelligence (AI) coding assistant, Claude Code, had been inadvertently released due to a human error. "No sensitive customer data or credentials were involved or exposed," an Anthropic spokesperson said in a statement shared with CNBC News. "This was a release packaging issue caused by human error, not a security
Published Analysis
Anthropic confirmed that internal source code for its Claude Code AI coding assistant was inadvertently published to npm due to a human error during the release packaging process. The company stated that no sensitive customer data, credentials, or proprietary AI model weights were exposed in the incident. The leak originated from an internal mistake rather than malicious activity or a security breach. Anthropic acted quickly to remove the exposed code from the npm registry. Organizations using Claude Code or similar AI development tools should ensure their own internal release processes include proper access controls and verification steps to prevent accidental exposures. This incident highlights the importance of rigorous release management procedures even for internal tooling. Anthropic on Tuesday confirmed that internal code for its popular artificial intelligence (AI) coding assistant, Claude Code, had been inadvertently released due to a human error. "No sensitive customer data or credentials were involved or exposed," an Anthropic spokesperson said in a statement shared with CNBC News. "This was a release packaging issue caused by human error, not a security Anthropic on Tuesday confirmed that internal code for its popular artificial intelligence (AI) coding assistant, Claude Code, had been inadvertently released due to a human error. "No sensitive customer data or credentials were involved or exposed," an Anthropic spokesperson said in a statement shared with CNBC News. "This was a release packaging issue caused by human error, not a security