‹ BackPlaywright

Playwright

2026-07-05 21:26:12

Anthropic's Claude Code Full Source Code Leaked via npm: Hidden Agent Modes, Internal Model Benchmarks and Supply Chain Attack

Anthropic accidentally leaked Claude Code's full source code on npm (60MB, 512K lines TypeScript), revealing three-layer memory, KAIROS daemon mode, autoDream consolidation, Undercover Mode for anonymous open-source contributions, internal model names (Capybara, Fennec, Numbat) and performance data (Capybara false claims 29-30%). Concurrent npm supply chain attack via malicious axios package urges users to rotate credentials.

310
Anthropic's Claude Code Full Source Code Leaked via npm: Hidden Agent Modes, Internal Model Benchmarks and Supply Chain Attack