 at the end of last year, and Claude Code is built on top of it. A Bun bug (

), filed on March 11, reports that source maps are served in production mode even though Bun’s own docs say they should be disabled. The issue is still open. If that’s what caused the leak, then Anthropic’s own toolchain shipped a known bug that exposed their own product’s source code.

tech

The Claude Code Source Leak: fake tools, frustration regexes, undercover mode

> And here’s the kicker: Anthropic [acquired Bun](https://www.anthropic.com/news/anthropic-acquires-bun-as-claude-code-reaches-usd1b-milestone) at the end of last year, and Claude Code is built on top of it. A Bun bug ([oven-sh/bun#28001](https://github.com/oven-sh/bun/issues/28001)), filed on March 11, reports that source maps are served in production mode even though Bun’s own docs say they should be disabled. The issue is still open. If that’s what caused the leak, then Anthropic’s own toolchain shipped a known bug that exposed their own product’s source code.

lol, you can't make this up