The Engineer Who Asked Claude to Help Ship Claude — And Accidentally Open-Sourced Claude

Accidentally Open-Sourced

4:36

There is a certain kind of irony that only the AI era could produce.

Yesterday, an engineer named

Kevin Naughton Jr. posted one of the more remarkable confessions in recent tech history. As the engineer responsible for shipping the latest dev/claude-code npm package, he wanted to improve the debugging experience for his team. Noble goal. Standard practice. So he included source maps in the release.

If you are not a developer, here is what that means: source maps are essentially a decoder ring. They take minified, compressed production code — the kind deliberately made unreadable — and map it back to the original, human-readable source. They are an incredibly useful debugging tool. They are also, when accidentally shipped publicly, a complete and total gift to anyone who wants to read your internal codebase.

What got exposed? Just the small stuff. Every agent command. All system prompts. The complete query engine. Something called Undercover Mode. Something called Bypass Permissions Mode. And the full internal telemetry configuration. You know. The usual.

Now, here is the part that deserves a moment of quiet reflection.

Kevin noted in his post that he "genuinely believed the safeguards Claude Code had built for me would be adequate." Read that again slowly.

The engineer trusted Claude Code — Anthropic's own AI coding assistant — to protect the Claude Code source code from being accidentally leaked.

Claude Code did not catch it.

This is not a criticism of Kevin. It is a genuinely important data point about where we are with AI-assisted development. When an engineer makes a consequential deployment decision and defers to the AI's judgment as a safety net, and the AI misses it — that is a workflow design problem, not just a human error problem. The safeguards were assumed. The assumption was wrong. There is also the small matter of timing.

This happened on March 31st. The day before April 1st. And the files visible in the leak show folder names like buddy, assistant, moreright, costHook, upstreamproxy, and notably, ink. The source map zip was hosted at a path that was discoverable within hours of the package being published.

Is this real? Is this an elaborate April Fool's prank seeded a day early? Is Kevin okay? Is Claude okay?

Honestly: unclear. The GitHub repository linked in the post is real, the package was real, and the community response was real enough that it spread quickly. Whether the firing is real, whether the exposure was intentional, or whether someone at Anthropic is currently having a very long Tuesday — we may not know until April 2nd, when the internet goes back to trusting things again.

What I do know is this: whether this is a prank or a genuine incident, the underlying lesson is not a joke. We are in a period where developers are shipping code faster than ever, with AI assistants handling more of the decision surface. That is genuinely powerful. It is also a new category of risk that most teams have not fully mapped.

The old model: a developer makes a mistake, a reviewer catches it, a process prevents it.

The new model: a developer delegates to an AI, trusts the AI's defaults, and the AI — trained to be helpful — ships exactly what it was asked to ship, without flagging that the thing it was asked to ship was the keys to the kingdom.

Claude Code was not wrong. It did what it was asked. The problem is that doing what you are asked is not the same as doing what you meant.

That gap — between instruction and intent — is where the next generation of AI safety work actually lives. Not in alignment theory. In the npm registry at 1:17 AM on a Tuesday.

Kevin, if this is real: I hope you land somewhere good. Accidentally open-sourcing your employer's internal architecture is a rough way to go out, but you handled it with more grace than most would.

If this is a bit: genuinely well played.

Either way — happy April Fool's Day, everyone. Probably check your source maps before you ship. 🤣

-rich