← all entries
B-TIER news

Claude Code source leak — npm debug bundle, mass forks and a Python rewrite

nataindata · 2025-12-19T13:35:21.000Z · in Art Inspiration
Open post ↗

100k ft — What is this?

Claude Code source leak — npm debug bundle, mass forks and a Python rewrite
newsB-tier

50k ft — Why care?

A retelling of the Claude Code leak: a ~60 MB debug/source file shipped inside an npm update, was spotted within minutes, forked tens of thousands of times despite DMCA takedowns, rewritten in Python by a heavy-user developer in hours (a record-fast star count) and mirrored to a decentralized host. Irony noted: the leak included an 'undercover mode' meant to stop Claude leaking internals.
artgamingmusicnewsopen sourcesecuritysoftware development

10k ft — Key takeaways

• Audit published npm packages for source maps and debug artifacts before release • Once code is forked and mirrored, takedowns can't recall it

5k ft — Tools & techniques

Claude Code, GitHub, Python, npm source map leakage

1k ft — Deep-dive / try it

you don’t need Netflix with this tech drama
Transcript excerpt
What happened in the last 12 hours is wild, so today at 4am, Antropic pushes an update to MPM. And inside their package, there is an entire code base, a 60-megabyte debugging file accidentally bundled in. And 23 minutes later, the researcher shoved on shoes, spotted and downloads the zip, of course he did. He posted on X and within 6 hours it has like 3 million views. By the time Antropic's team woke up, the code was forked 41,000 times across GitHub. Antropic, of course, started firing DMC, DMC take downs, but it's obviously too late. But the thing is, a Korean developer, Sigrid Jean woke up to his phone exploding, and just FYI, he is the clothe code's biggest power user. He burned like 25 billion tokens last year. So what he did, he read the leaked code and rewrote the entire thing in Python in just like 8 hours. And his repo hit 30,000 stars faster than any GitHub project in history. And that version now has, I just like checked around 96,000 stars, but then someone mirrored it to a decentralized platform with just like one message, it will never be taken down, so the code is permanent and Antropic cannot get it back. But I think the funniest thing here is that Antropic built a something called undercover mode, and its only job is to prevent clothes from accidentally leaking internal secrets. So link is in the repo, go just check it out, and tell me what do you think?

Appears in

More from @nataindata

Collection: Art Inspiration