{"id":167003,"date":"2026-04-01T11:11:55","date_gmt":"2026-04-01T09:11:55","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/utechka-koda-instrumentariya-claude-code-iz-za-zabytogo-v-npm-pakete-map-fajla"},"modified":"2026-04-01T11:11:55","modified_gmt":"2026-04-01T09:11:55","slug":"utechka-koda-instrumentariya-claude-code-iz-za-zabytogo-v-npm-pakete-map-fajla","status":"publish","type":"post","link":"https:\/\/prohoster.info\/en\/blog\/news\/utechka-koda-instrumentariya-claude-code-iz-za-zabytogo-v-npm-pakete-map-fajla","title":{"rendered":"Code leak of the Claude Code toolkit due to a forgotten map file in the NPM package.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"
The company Anthropic accidentally released the complete unobfuscated and uncleaned source code of the Claude Code toolkit in TypeScript as part of the NPM package release 2.1.88. The code was included in the map file cli.js.map used during debugging. To prevent similar leaks, developers are advised to remember to add the mask '*.map' in the '.npmignore' file. <\/p>\n
The archive with the code is 59.8 MB in size, includes 1,884 files, and contains more than 500,000 lines of code. Enthusiasts have started replicating the code on GitHub, but the company Anthropic has initiated DMCA takedown notices to block repositories containing the leaked code based on the U.S. Digital Millennium Copyright Act (DMCA). <\/p>\n
During the analysis of the leaked information, 8 yet-to-be-announced new features, 26 hidden commands, 32 build flags, 22 private repositories, and more than 120 confidential environment variables were discovered. Among the hidden features are: <\/p>\n
\n
The 'Undercover' mode, which removes traces of AI involvement when making changes to public repositories (does not display Co-Authored-By and does not mention the model name or AI usage).\n
'Easter egg' that provides a user with their virtual pet, displayed next to the command line. The appearance and behavior of the pet are unique and based on the account ID.\n
The flag CLAUDE_CODE_COORDINATOR_MODE=1, which enables Claude Code to operate in coordinator mode, autonomously breaking tasks into parts, distributing them among individual AI agents, and consolidating the results.\n
Inter-session IPC interface that allows sending messages to other sessions running on the same computer (similar to a chat between AI agents).\n
Proactive mode, which includes around-the-clock work on code that is not tied to sessions. A constantly active assistant, KAIROS, remembers the state between sessions.\n
Background mode (Daemon Mode), allowing the use of the command 'claude --bg' to start sessions and process prompts in the background, with the ability to view logs and switch the session to active mode.\n
ULTRAPLAN mode, which creates a separate instance in the cloud for generating a work plan to solve complex tasks.\n
The Auto-Dream mode (\\\/dream) organizes the information obtained during sessions and generates ideas for problem-solving and action plans during inactive time between sessions.\n
To bypass the internal leak detector, the codename of the internal model 'capybara' is encoded as String.fromCharCode(99,97,112,121,98,97,114,97).\n
![\"Code](\"\/wp-content\/uploads\/2026\/04\/e9de9066d3f822e728751d371c81fac4.jpg\")
<\/p>\n