Claude Code's entire source code was leaked

There is a new open-source coding agent

in town and it's not open code. It's not

Codeex. It's actually Claude Code and it

wasn't on purpose, but just today, the

day before April Fools, Anthropic was

making their daily updates to Claude

Code. There was a small mistake that was

made, which was basically that they

accidentally included site maps in their

project. And I'll speak a little bit

about what that actually means, but the

genie was out of the bottle. And we know

how the internet works. Once something

is out there, it's kind of hard to take

it back. And Anthropic is doing their

best because if you try to download the

code, it is not available. And that's

been happening and it's been getting

fixed. So, uh, this is hosted on

Cloudflare. So, I don't know exactly

what's going on there. I don't know if

it's a Cloudflare thing or if this

person is just, uh, re-uploading it

every time. But I was able to download

the source code. And I think there's a

ton of consequences of this. I think

there's a lot uh of reasons why this

actually uh because the main question

you might be asking is what does this

even matter? Like who cares? And I think

it actually does, but not for reasons

that a lot of people might think. So

first I want to just kind of briefly

explain. The short version is that with

languages like JavaScript notably uh

there's a concept called sitemaps where

if you want to look at the source code

as a project is running you can do that

and you know commonly it's done in the

browser but when a project is actually

deployed to production usually you don't

have that the code is minified it's made

not very human readable it's not really

easy to debug that and that's usually

deliberate. So if you didn't know claude

code it's a JavaScript project believe

it or not. Yeah, the terminal UI it's

it's built with JavaScript specifically

bun. That's actually the reason why the

bun acquisition was made because claude

code is heavily dependent on bun. But

you know with most code the risk doesn't

really exist of that happening because

most code as we know is compiled into

you know bite code and assembly and

binaries and things like that. So it's

it's not going to be human readable by

default. But with interpreted languages

like Python and JavaScript, that's not

the case. So, and so the obvious uh

assumption that would be made is like h

how was this possible? Because it

usually doesn't happen. And it actually

did happen originally when cloud code

was released. I think like a year ago,

they actually also accidentally included

sitemaps, but it wasn't as big of a deal

at that point because the project wasn't

as mature. But now there's a lot of

things that people are learning from the

the source code. And like I said, I

think long-term that's not really going

to be like the fact that the code is

public. I don't think there's going to

be anything that crazy that people learn

from it. I don't think the competitors

are going to, you know, have all the

secret sauce and now Claude Code is

going to fail or whatever. And I know a

lot of people are probably gonna want to

dunk on Anthropic because even though

they said they did put out a statement

uh in this statement, they did say that

this actually uh no customer data or

whatever was exposed and and that's

pretty important. Uh but they said

specifically this was caused by human

error, not a security breach, and we're

rolling out measures to prevent this

from happening again. Now, what exactly

does that mean? Does that mean like it

was a manual error? Or does it mean

somebody was vibe coding a little bit

too hard, maybe not reviewing the code

and they're following, you know, the the

mantra of go fast and leak your entire

source code? And that I I you know if I

had to guess I think probably it was

that cuz uh you know there has to be

multiple failures for something like

this to happen because okay it's a human

error to include the site maps but

usually you know things like that should

be caught in review and you know maybe

there was some kind of automated process

like deployment process or script or

whatever that uh resulted in this but

even that you know there has to be

certain guard rails and things. So a lot

of people are going to say that well the

you know this proves that the philosophy

that the entire claude co code team is

following of like they're building this

tool using this tool and they're saying

that you know coding is dead and you

know variations of that that nobody

should be writing code reading code and

manually and all that stuff but I also

want to talk about the other side of

that right after we talk about today's

sponsor which is I think perfect.

Gretile. Do you want to catch bugs

before they get deployed? Well, you

should consider checking out Gretile. I

personally have been using it for

several months. I really enjoy it. I

still believe and and the team at

Gretile still believes that it is

important for humans to be involved in

the review process. It's not just about

taking a tool and just delegating your

entire review process to to the tool.

But we also know that humans are flawed,

too. People like to blame AI, but also

there's been plenty of bugs shipped by

humans because humans didn't review the

code as well as they could have. And

that's why I like Reptile because not

only does it automate certain aspects of

the review, but it actually helps you as

a reviewer have context of the changes

that are made. We've been shipping a lot

of stuff on Neat Code lately. My job for

a lot of this has been mainly as like a

reviewer and so while I do look at the

code sometimes there is a lot of code

and what GPL does as a reviewer I still

want to know generally like what's going

on like what does it accomplish like

what are the major design decisions that

were made and so like it gives me charts

that are pretty useful so like this

flowchart so like logically uh it's

taking like the most important parts of

the code and it's making it a lot more

human readable right So, it's not, like

I said, about just having the tool

review everything for you. You you can

be involved as much as you want or as

little as you want. So, it kind of gives

me that level of control, which I really

like. And it is completely free to try

out. So, there's really no reason not

to. You don't even have to put in your

credit card. You can use it for 14 days

free. There are a lot of companies, a

growing amount of companies using this.

So, don't just take my word for it. Try

it out yourself. See what you think.

Check it out with the link in the

description. tell them that Neat code

sent you. But like I said, I wanted to

consider the other side of the argument

of people who are inclined to dunk on

the Cloud Code team and maybe their

entire philosophy, which you know, it's

fair to do that. I'm not saying I agree

with everything that they've said and

you know they have in some cases

overhyped things and sometimes

exaggerated things and some people have

feel felt like they're trying to take

our jobs and this is a sign that they

were wrong that the Claude code team is

wrong. they just screwed up very big.

But another side could be that this is

just the cost of doing business that uh

in the grand scheme of things the the

velocity that the team has been adding

features whether uh I don't know if

everybody's using those features or not

but they're going pretty quick that it's

worth it and I think long term that

could be the case. I'm not necessarily

going one way or the other, but I'm just

saying that there is the other side to

it. And I'm sure Anthropic isn't happy

about this, but it, like I said, it's

it's not going to kill their business. I

don't think it's going to make that big