A researcher finds that Anthropic's Claude Code CLI tool has had its full TypeScript source code inadvertently exposed through a misconfigured npm package