Top Stories
Claude Code’s Full Source Code Leaks via npm Packaging Error
Anthropic accidentally shipped a 59.8MB source map file in version 2.1.88 of the @anthropic-ai/claude-code npm package on Monday. Source maps are meant for internal debugging, mapping minified code back to readable source. This one effectively published the entire Claude Code codebase — roughly 1,900 files and 512,000 lines of TypeScript — in plain readable form.
Within hours, the code was mirrored across GitHub and picked apart by thousands of developers. Among the findings: approximately 40 discrete, permission-gated tools; a 46,000-line query engine handling streaming responses, tool loops, and token tracking; and 44 feature flags for capabilities that are built but not yet shipped.
Most eyebrow-raising was an “Undercover Mode” feature suggesting Anthropic uses Claude Code for stealth contributions to public open-source repositories, with system prompts warning the model not to reveal internal information. Anthropic called it “a release packaging issue caused by human error, not a security breach,” and said no customer data was involved.
The timing was unfortunate. A concurrent supply-chain attack on the axios npm package occurred hours before the leak, potentially affecting anyone who updated Claude Code on March 31.
Source: The Register, VentureBeat, Alex Kim
OpenAI Closes Record $122 Billion Round at $852 Billion Valuation
OpenAI finalized its funding round at $122 billion in committed capital — the largest private fundraise in Silicon Valley history — at a post-money valuation of $852 billion. The round was co-led by SoftBank, with Amazon contributing $50 billion and Nvidia and SoftBank each putting in $30 billion.
In a first for a pre-IPO AI company, OpenAI also raised $3 billion from individual investors through bank channels. The company now generates $2 billion in monthly revenue, though it remains unprofitable as it burns through cash on compute infrastructure.
The round sets the stage for an expected IPO later this year. At $852 billion, OpenAI would debut as one of the most valuable companies on any public exchange, trailing only Apple, Microsoft, Nvidia, and a handful of others.
Oracle Fires Up to 30,000 Workers via 6 a.m. Email
Oracle began executing what analysts believe is the largest layoff in the company’s history on March 31. Employees across the U.S., India, Canada, Mexico, and other countries received termination emails from “Oracle Leadership” at approximately 6 a.m. local time, with no prior warning from HR or direct managers.
TD Cowen estimates between 20,000 and 30,000 employees were cut — roughly 18% of Oracle’s 162,000-person global workforce. The layoffs are expected to free up $8–10 billion in cash flow to fund Oracle’s $156 billion AI data center buildout.
The cold arithmetic: Oracle posted a 95% jump in net income last quarter to $6.13 billion, and its contracted future revenue stands at $523 billion, up 433% year over year. The company is profitable and growing fast — but it needs humans off the payroll to pay for the machines.
Source: The Next Web, CNBC
Quick Hits
-
Google launches Veo 3.1 Lite: Following OpenAI’s Sora shutdown last week, Google released its most cost-effective video generation model. Veo 3.1 Lite generates 720p video at $0.05 per second — less than half the cost of Veo 3.1 Fast. Available now on the Gemini API and Google AI Studio. Google Blog, 9to5Google
-
California’s AI executive order: Governor Newsom signed an order requiring AI companies seeking state contracts to certify safeguards against misuse, including prevention of CSAM generation, watermarking of AI-generated media, and protections against harmful bias. The order directly counters the Trump administration’s push for federal preemption of state AI regulation. Governor’s Office
-
ChatGPT comes to CarPlay: With iOS 26.4, Apple opened CarPlay to voice-driven AI chatbots. ChatGPT is the first to launch a dedicated CarPlay app, allowing hands-free voice conversations while driving. Gemini and Claude could follow. No visual interface — voice only, for safety. 9to5Mac
-
OpenAI kills Sora, Google wins video: OpenAI officially shut down its AI video app on March 24, citing unsustainable compute costs. The closure ended a $1 billion Disney partnership. Google’s Veo 3.1 is now the dominant platform, integrated across YouTube Shorts, Google Vids, and the Gemini API. The Motley Fool
Worth Watching
The Claude Code leak exposed 44 feature flags for unreleased capabilities. The code references internal model codenames — Capybara, Fennec, and Numbat — suggesting Anthropic has at least one unreleased model variant in testing. With an IPO reportedly planned for as early as October at a $60+ billion valuation, the leak’s timing couldn’t be worse for Anthropic’s “safety-first” brand.
Meanwhile, the AI industry’s human cost keeps growing. Between Oracle’s 30,000 cuts and Amazon’s 16,000 earlier this year, tens of thousands of tech workers are being displaced not because business is bad, but because companies need cash for GPU clusters. The pattern is clear: every dollar spent on AI data centers is a dollar not spent on payroll.