The Claude Code packaging incident is the clearest case study vibe coding's critics have been handed. A misconfigured packaging rule exposing proprietary source code at that scale — 512,000 lines — passed every automated check because the failure was in configuration, not logic. Security tooling looks for vulnerable code patterns; it does not audit what you accidentally decided to ship. The institutional consequence is direct: organizations that have offloaded code generation to AI without updating their release checklists are running the same exposure, and most will not discover it through…