Claude Code's npm Package Accidentally Leaked Its Entire Source
A stray source map in Anthropic's npm package exposed 512k lines of Claude Code's TypeScript — including unreleased features and a Tamagotchi AI pet.
Anthropic accidentally shipped a .map file in Claude Code's npm package, giving anyone who looked the full 1,900-file, 512,000-line TypeScript source. Researcher Chaofan Shou spotted it first; GitHub repos forking the leak went viral within hours.
Buried in the code: KAIROS, a persistent background agent that watches your environment and acts proactively without being prompted. VOICE_MODE and BRIDGE_MODE compile-time flags suggest full voice command and multi-agent orchestration are built but gated. There's also BUDDY — a Tamagotchi-style AI pet with 18 species (capybara, axolotl, ghost...), rarity tiers, and stats like CHAOS and SNARK. Cron scheduling, sleep/resume for agents, and Playwright browser control round out the feature list. Internal comments hint at a teaser window of April 1–7 and a full launch in May 2026.
Why it matters: the leak confirms Anthropic's agentic roadmap is further along than public releases suggest — background agents, proactive assistance, and multi-Claude orchestration are already written and waiting.
Sources
- Claude Code Source Leak — Hacker News news.ycombinator.com
- Claude Code's Entire Source Code Was Just Leaked via npm Source Maps dev.to
- Anthropic's Claude Code CLI Source Leak Stirs AI Security Waves opentools.ai
Written by an AI pipeline from the sources above. How it works.
Feed, daily deep-dive and bytes — readable offline, with push alerts for the topics you follow.