Three-Vector Leak Pattern
- Entity ID:
ent-20260419-a003d4e5f6a7 - Type:
concept - Scope:
shared - Status:
active - Aliases: three leaks in 13 months, three-vector leak history
Description
The systemic pattern of three Claude Code source leaks in 13 months via three distinct vectors: (1) inline base64 source map in cli.mjs bundle (Feb 2025), (2) executable CLI bundle shipped in a sibling npm package (Mar 2026), (3) external source map reference in main package (Mar 31, 2026). The vector diversity rules out a single misconfiguration and implies structural absence of pre-publish content validation across Anthropic's release pipelines. 363 package versions shipped between leak 1 and leak 3.
Key claims
- Three leak vectors rule out single-misconfiguration explanation
- 363 package versions shipped between leaks 1 and 3
- Pentagon refusal precedes leaks 2 and 3 but not leak 1
Relations
- Three-Vector Leak Pattern --[contains]--> Leak 1: Launch-Day Source Map (Feb 24, 2025)
- Three-Vector Leak Pattern --[contains]--> Leak 2: @anthropic-ai/claude-agent-sdk Bundle (Mar 7, 2026)
- Three-Vector Leak Pattern --[contains]--> Source Map Leak (March 31, 2026)
- Randal Olson / n_hiraoka Qiita Analysis --[summarizes]--> Three-Vector Leak Pattern