Anthropic's Stainless repo deletion cascade-wiped customer's private fork with no notice

kingslyj · x · 2026-10-28

Dev Ayush Agarwal followed up on the "stranger deleted our private repo" incident: no hack, no GitHub bug. The repo was a private fork of a Stainless-owned repo powering their entire SDK pipeline. Stainless was acquired by Anthropic in May, and on Oct 27 someone there deleted their copy without notifying customers. GitHub's cascade behavior means deleting a private repo deletes all its private forks in under two seconds, and the audit log shows the same person deleting both. The repo isn't in deleted repositories, so it can't be restored — highlighting a supply-chain risk where acquisitions or upstream cleanups can silently destroy downstream private code assets.

Original post →

More from Companies & People

Companies & People channel →