TLDR Tech / InfoSec
Critical Vulnerability in Claude Code Emerges Days After Source Leak
Anthropic accidentally published a debug sourcemap for Claude Code v2.1.88 to npm, exposing 512,000 lines of TypeScript code across 1,900 files, which is now permanently replicated online. Separately, Adversa AI found a flaw in Claude Code's permission system: feeding it a 50+ subcommand pipeline via a malicious CLAUDE.md file silently disables all deny rules, with no user warning. This opens the door to stealing SSH keys, AWS credentials, and GitHub tokens, as well as poisoning CI/CD pipelines.
Read the full story