The artificial intelligence vanguard, Anthropic, yesterday dispatched a formal mandate to GitHub under the auspices of the Digital Millennium Copyright Act (DMCA), demanding the obliteration of over 8,100 repositories harboring the compromised Claude Code. Subsequently, a multitude of developers were besieged by DMCA sequestration notices issued by the platform.
From a jurisprudential standpoint, Anthropic’s endeavor to purge repositories containing the exfiltrated source code is entirely justifiable; nevertheless, the execution of this decree resulted in the indiscriminate suppression or deletion of numerous legitimate forks, igniting a tempest of indignation across X/Twitter. This collateral devastation occurred because Anthropic, citing both the primary repository of a third-party leaker and its own sovereign Claude Code sanctuary, compelled GitHub to expunge every associated branch in its entirety.
Crucially, Anthropic’s own primary repository is inherently designed to be forkable and is bereft of the sensitive core architecture; for instance, repositories forged weeks prior by developers merely submitting pull requests for nascent features were likewise ensnared and vanquished by the DMCA dragnet. It is noteworthy that while GitHub dutifully notifies developers via electronic mail upon the sequestration of their work, no such courtesy was extended during the restoration process. It appears that following a strategic recalibration by Anthropic, GitHub has begun to resurrect those repositories wrongfully besieged, yet this was done in absolute silence.
“The repo named in the notice was part of a fork network connected to our own public Claude Code repo, so the takedown reached more repositories than intended,” an Anthropic spokesperson told TechCrunch. “We retracted the notice for everything except the one repo we named, and GitHub has restored access to the affected forks.”
It was only after scrutinizing Anthropic’s public discourse that certain developers discovered their repositories had been surreptitiously restored to their former state. As for Anthropic’s formal response, it remains utterly devoid of even a shred of contrition.
Support Our Threat Intelligence
If you find our CVE report and cybersecurity news helpful, consider supporting our work.