ClaudeCode Leak

The Claude Code Leak Archive

A high-fidelity technical investigation into the "most significant AI leak of 2026." On March 31, 2026, Anthropic accidentally exposed the full source code for **Claude Code**, its flagship agentic CLI tool.

📊 Leak Statistics at a Glance

Metric	Value
Total Lines of Code	512,000+ (TypeScript) [1, 2]
Number of Files	1,906 [3, 1, 4]
Hidden Feature Flags	44 [1, 5, 6]
Source Map Size	59.8 MB [1, 2, 7]
Viral Discovery	28M+ views on discovery tweet [8, 9]

🔍 Why This Leak Matters

Unlike a weight leak, this incident exposed the **"Agentic Harness"**—the production-grade orchestration layer that allows LLMs to perform complex tasks autonomously. It revealed how Anthropic solves "context entropy" and coordinates multi-agent "swarms".[2, 4, 10]

📂 Repository Structure

• CHRONOLOGY.md: The minute-by-minute timeline of the disaster.
• ARCHITECTURE.md: Deep-dive into memory, swarms, and the query engine.
• FEATURES_ROADMAP.md: Analysis of unreleased modes (KAIROS, ULTRAPLAN, BUDDY).
• RESOURCES.md: Master table of mirrors, community ports, and analysis sites.
• SECURITY_ADVISORY.md: IMPORTANT warning regarding the concurrent Axios RAT attack.

---

**Disclaimer:** This repository contains technical analysis and archival links for educational purposes. We do not host the original intellectual property to avoid DMCA complications.

---

2. CHRONOLOGY.md (The Timeline)

🕒 Chronology of the Disaster (March 31, 2026)

The "Perfect Storm" occurred within a 9-hour window on a Tuesday morning.[11, 12]

• 00:21 UTC: Malicious versions of axios (1.14.1 / 0.30.4) are published to npm by a hijacked maintainer, containing a Remote Access Trojan (RAT).[1, 13, 14]
• 04:00 UTC: Anthropic pushes Claude Code v2.1.88 to npm. A misconfigured .npmignore includes cli.js.map.[8, 1]
• 04:23 UTC: Security researcher Chaofan Shou discovers the