“A source map left in the published npm package exposes the full Claude Code source, including system prompts and undocumented tools.”

Anthropic shipped a closed product with the source map turned on. Anyone who ran npm install got the entire codebase whether they wanted it or not. The fun reveal is the system prompt full of tools nobody documented and emotion-suppression instructions written in plain English. The leak does not damage Anthropic the way some people think. It just confirms what everyone suspected the prompt looked like.