Claude Code's source exposed through NPM map file

Hacker News·1mo·treexs

A developer discovered Claude Code's source code leaked via a source map file left in the NPM registry—a common mistake that exposes proprietary code to anyone downloading the package. It's a sharp reminder that build artifacts need the same security scrutiny as production code, especially for tools handling sensitive operations.

Related stories