Claude Code’s npm build shipped its full TypeScript source

The .js.map files that came with Claude Code on npm carried a sourcesContent field with the full original TypeScript, nearly two thousand files. Someone read all of them and turned it into an 18-chapter book.
Claude Code from Source describes the agent as a single async generator that streams model output, runs tools and recovers from errors. Tools are partitioned by safety class: reads run in parallel, writes are serialized.
Sub-agents are where the costs go. Fork agents spawn children with byte-identical prompt prefixes, so the shared part stays in the prompt cache and input tokens drop by around 95%.
AI agents wrote the book in four phases, about 6 hours from source extraction to the revised text. It carries no Claude Code source: every code block was rewritten as pseudocode with different variable names.
Up next
libheif bugs reached OpenAI repos and GitHub Enterprise
One image parser to pwn them all Hacktron says a crafted .heic upload could have dumped OpenAI’s private repositories. Some of its RCE attempts landed only after thousands of uploads.
Related stories
- Claude Code threads collide as ordinary merge conflicts
- Claude Code’s team lets low-risk PRs merge with no human
- Linus Torvalds uses Claude Code on a hefty kernel change
- Claude Code sessions keep running after you close the laptop
- Claude Code reads AGENTS.md when CLAUDE.md is missing
- Cat Wu, Claude Code’s head of product, leaves Anthropic
Comments
No comments yet. Be the first.
Join the conversation
Sign in to leave a comment. It appears after moderation.

