Breachesby GlyphAnthropic
Disclosed Mar 31, 2026Unverified
Claude Code source code accidentally published in npm package
Anthropic briefly published Claude Code version 2.1.88 to npm with a 60MB source map that contained the tool's closed source code, which spread widely on GitHub. Anthropic called it a packaging error and said no customer data or credentials were exposed.
What is known
| People affected | Not stated in the sources we have |
|---|---|
| Disclosed | Mar 31, 2026 |
| Discovered | Mar 31, 2026 |
| Attack | Exposed data |
| Data exposed | Source code |
| Sector | AI · US |
| Status | Unverified: not yet confirmed by an official notice, a filing or the organization |
Sources
Notices filed
Other breaches at Anthropic
Infostealer-stolen session cookies used to hijack Claude accountsHacking exposed credentials and tokens, payment cards and prompts and chats.HackingAIUSUnverifiedAug 31Shared Claude conversations appeared in Google search resultsExposed data exposed prompts and chats, messages and source code.Exposed dataAIUSUnverifiedJul 27DeepSeek, Moonshot and MiniMax used 24,000 fraudulent accounts to distill ClaudeAI or model exposed training data.AI or modelAIUSFeb 23Chinese state group manipulated Claude Code to attack about 30 organizationsHacking exposed internal documents and credentials and tokens.HackingAIUSNov 13, 2025Cybercriminal used Claude Code to steal and extort data from at least 17 organizationsExtortion exposed financial details, health records and credentials and tokens.ExtortionAIUSAug 27, 2025Contractor mistakenly emailed file of customer names and credit balances to third partyInsider exposed names and financial details.InsiderAIUSUnverifiedJan 29, 2024
History of this record
First recordedby seedSource
First seen 2026-09-25 (Research). Record counts are as reported. Not legal advice.