Dev Oversight: Apple Accidentally Leaked Entire App Store Web Source Code via SourceMap

Apple’s redesigned App Store web version was launched with a new homepage and search function, but an oversight left the production environment’s SourceMap enabled, allowing anyone to download the complete front-end codebase from the live site. According to the article, developer @rxliuli stated that the source code has been archived on GitHub for public study and reference, for educational purposes.

The repository includes the full Svelte/TypeScript source code, state management logic, UI components, API integration code, and routing configuration. Although the incident constitutes a data exposure, it poses no significant security or privacy risk, as the leaked materials contain no sensitive credentials or keys. Nevertheless, it remains a serious procedural lapse, since disabling SourceMap in production is a fundamental best practice for any development team. The article notes the access is available via the GitHub link provided in the report, and was published on 5 November 2025.