Anthropic Leaks Claude Code Source, Exposes Roadmap

On March 31, 2026 Anthropic accidentally published the full Claude Code source to the public developer registry, exposing roughly 500,000+ lines across ~2,000 files and an unreleased feature roadmap. A debug/source-map file bundled into a routine package release pointed to a zip archive on Anthropic cloud storage; security researchers and community contributors mirrored and dissected the code within hours. Anthropic says no customer credentials or sensitive customer data were exposed and attributes the incident to human error in the release packaging process. The leak reveals feature flags for persistent background assistants, cross-session memory, and other capabilities that show the company’s longer-term technical direction — information competitors and attackers can now study. For ML/engineering teams, the event is a concrete reminder to lock down CI/CD packaging, audit bundled artifacts (source maps, debug files), and practice aggressive secrets and IP scanning before public releases.