Claude Code source code accidentally leaked in NPM package

Multiple high-impact security events and vulnerabilities were reported: Anthropic accidentally published closed-source Claude Code in an npm package (no customer credentials reported exposed); attackers compromised the popular Axios npm package to deliver cross‑platform RATs (npm supply‑chain compromise); Cisco had source code stolen after threat actors used credentials from the Trivy supply‑chain incident to breach a dev environment; researchers (using Claude) discovered file‑open RCE bugs in Vim and GNU Emacs; GIGABYTE Control Center contains an arbitrary file‑write flaw that can expose host