Anthropic inadvertently released internal source code behind its popular artificial-intelligence-powered Claude coding assistant, raising questions about the security of an AI model developer that has built its brand on prioritizing safety. <\/p>\n
\u201cEarlier today, a Claude Code release included some internal source code. No sensitive customer data or credentials were involved or exposed,\u201d Anthropic said in an emailed statement late Tuesday. \u201cThis was a release packaging issue caused by human error, not a security breach.\u201d<\/p>\n
The accidental release marked Anthropic\u2019s second security slipup in a matter of days, compromising approximately 1,900 files and 512,000 lines of code related to Claude Code \u2014 an agentic coding tool that runs directly inside developer environments. Last week, Fortune separately reported that Anthropic had been storing thousands of internal files on a publicly accessible system, including a draft blog post that detailed an upcoming model known internally as both \u201cMythos\u201d and \u201cCapybara.\u201d <\/p>\n
The exposures couldn\u2019t come at a worse time for Anthropic, which was declared by the U.S. government to be a supply chain risk earlier this year and is fighting the designation in court. The company has warned that the labeling could cost it billions of dollars in lost revenue.<\/p>\n
The latest accidental release involving Claude Code first came to light in a post on the social media platform X that purported to share a link to the code and garnered more than 30 million views. The leak has touched off thousands of posts online by people saying they\u2019ve scoured the code. Some have claimed they\u2019ve unearthed yet-to-be-released features, as well as quirks in the existing Claude Code system. <\/p>\n
Several experts raised concerns about potential security vulnerabilities. \u201cAttackers can now study and fuzz exactly how data flows through Claude Code\u2019s four-stage context management pipeline and craft payloads designed to survive compaction, effectively persisting a backdoor across an arbitrarily long session,\u201d AI cybersecurity firm Straiker said in a blog post.<\/p>\n
For its part, Anthropic said it\u2019s \u201crolling out measures to prevent this from happening again.\u201d<\/p>\n
In February, Anthropic raised $30 billion in a massive funding round that valued the company at $380 billion, including the money raised, roughly doubling its prior valuation. The company landed itself in the spotlight that same month for releasing a series of products that sent the shares of numerous entities, including legal service companies and cybersecurity firms, plunging on fears of widespread disruption. <\/p>\n
Ghaffary and Anderson write for Bloomberg.<\/p>\n","protected":false},"excerpt":{"rendered":"Anthropic inadvertently released internal source code behind its popular artificial-intelligence-powered Claude coding assistant, raising questions about the security…\n","protected":false},"author":2,"featured_media":2215,"comment_status":"","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[152],"tags":[2975,2976,587,2973,1020,2981,586,2979,2977,2978,2982,2974,740,2980,932,2196],"class_list":{"0":"post-2214","1":"post","2":"type-post","3":"status-publish","4":"format-standard","5":"has-post-thumbnail","7":"category-dario-amodei","8":"tag-accidental-release","9":"tag-ai-cybersecurity-firm-straiker","10":"tag-anthropic","11":"tag-claude-code-release","12":"tag-company","13":"tag-concern","14":"tag-dario-amodei","15":"tag-draft-blog-post","16":"tag-file","17":"tag-internal-source-code","18":"tag-last-week","19":"tag-line","20":"tag-post","21":"tag-potential-security-vulnerability","22":"tag-security","23":"tag-thousand"},"share_on_mastodon":{"url":"","error":""},"_links":{"self":[{"href":"https:\/\/www.europesays.com\/people\/wp-json\/wp\/v2\/posts\/2214","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.europesays.com\/people\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.europesays.com\/people\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.europesays.com\/people\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.europesays.com\/people\/wp-json\/wp\/v2\/comments?post=2214"}],"version-history":[{"count":0,"href":"https:\/\/www.europesays.com\/people\/wp-json\/wp\/v2\/posts\/2214\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.europesays.com\/people\/wp-json\/wp\/v2\/media\/2215"}],"wp:attachment":[{"href":"https:\/\/www.europesays.com\/people\/wp-json\/wp\/v2\/media?parent=2214"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.europesays.com\/people\/wp-json\/wp\/v2\/categories?post=2214"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.europesays.com\/people\/wp-json\/wp\/v2\/tags?post=2214"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}