Anthropic Claude Code Leak
Anthropic accidentally exposed the full Claude Code client source via a 59.8 MB JavaScript source map on March 31, 2026, leaking ~513,000 lines of TypeScript and resulting in widespread downloads, forks, and mirrors. Zscaler ThreatLabz found threat actors abusing the leak as a lure on GitHub to distribute a Rust dropper that installs Vidar and GhostSocks, and provided mitigation guidance. #Anthropic #Vidar
On March 31, 2026, Anthropic exposed ~513,000 lines of TypeScript via a 59.8 MB source map in @anthropic-ai/claude-code v2.1.88, leading to widespread code forks. Threat actors are using the leak to distribute Vidar and GhostSocks malware. #AnthropicLeak #MalwareDistribution