The Claude Source Code Leak: Why AI Agent Security is an Imminent Crisis

On March 31, 2026, it was discovered that the complete source code of Claude Code—the core product of Anthropic—had been bundled and publicly released in an npm package. It wasn't a hacker intrusion. Not an insider leak. Not a zero-day vulnerability. The reason was absurdly laughable: the Bun bundler generates sourcemap files by default, and the team forgot to exclude them in .npmignore . The…