Claude Code's source code has been leaked via a map file in their NPM registry • Hacker News Board

Re: Claude Code's source code has been leaked via a map file in their NPM registry

#11

Post by bob1029 » Tue, Mar 31, 2026, 9:20 AM UTC

Is this significant?

Copilot on OAI reveals everything meaningful about its functionality if you use a custom model config via the API. All you need to do is inspect the logs to see the prompts they're using. So far no one seems to care about this "loophole". Presumably, because the only thing that matters is for you to consume as many tokens per unit time as possible.

The source code of the slot machine is not relevant to the casino manager. He only cares that the customer is using it.

Re: Claude Code's source code has been leaked via a map file in their NPM registry

#12

Post by nate8bit » Tue, Mar 31, 2026, 9:21 AM UTC

treexs wrote: post #7

The big loss for Anthropic here is how it reveals their product roadmap via feature flags. A big one is their unreleased "assistant mode" with code name kairos. Just point your agent at this codebase and ask it to find things and you'll find a whole treasure trove of info. Edit: some other interesting unreleased/hidden features - The Buddy System: Tamagotchi-style companion creature system with ASCII art sprites - Un…

[dead]

Re: Claude Code's source code has been leaked via a map file in their NPM registry

#13

Post by [deleted] » Tue, Mar 31, 2026, 9:21 AM UTC

mapcars wrote: post #2

Are there any interesting/uniq features present in it that are not in the alternatives? My understanding is that its just a client for the powerful llm

[deleted]

Re: Claude Code's source code has been leaked via a map file in their NPM registry

#14

Post by loevborg » Tue, Mar 31, 2026, 9:23 AM UTC

q3k wrote: post #9

The code looks, at a glance, as bad as you expect.

Can you give an example? Looks fairly decent to me

Re: Claude Code's source code has been leaked via a map file in their NPM registry

#15

Post by [deleted] » Tue, Mar 31, 2026, 9:24 AM UTC

bob1029 wrote: post #11

Is this significant? Copilot on OAI reveals everything meaningful about its functionality if you use a custom model config via the API. All you need to do is inspect the logs to see the prompts they're using. So far no one seems to care about this "loophole". Presumably, because the only thing that matters is for you to consume as many tokens per unit time as possible. The source code of the slot machine is not relev…

[deleted]

Re: Claude Code's source code has been leaked via a map file in their NPM registry

#16

Post by vbezhenar » Tue, Mar 31, 2026, 9:29 AM UTC

LoL! https://news.ycombinator.com/item?id=30337690

Not exactly this, but close.

Re: Claude Code's source code has been leaked via a map file in their NPM registry

#17

Post by Insensitivity » Tue, Mar 31, 2026, 9:29 AM UTC

loevborg wrote: post #14

q3k wrote: post #9

The code looks, at a glance, as bad as you expect.

Can you give an example? Looks fairly decent to me

the "useCanUseTool.tsx" hook, is definitely something I would hate seeing in any code base I come across.

It's extremely nested, it's basically an if statement soup

`useTypeahead.tsx` is even worse, extremely nested, a ton of "if else" statements, I doubt you'd look at it and think this is sane code

Re: Claude Code's source code has been leaked via a map file in their NPM registry

#18

Post by luc_ » Tue, Mar 31, 2026, 9:34 AM UTC

Insensitivity wrote: post #17

loevborg wrote: post #14

Earlier quoted context omitted.

Can you give an example? Looks fairly decent to me

the "useCanUseTool.tsx" hook, is definitely something I would hate seeing in any code base I come across. It's extremely nested, it's basically an if statement soup `useTypeahead.tsx` is even worse, extremely nested, a ton of "if else" statements, I doubt you'd look at it and think this is sane code

Fits with the origin story of Claude Code...

Re: Claude Code's source code has been leaked via a map file in their NPM registry

#19

Post by avaer » Tue, Mar 31, 2026, 9:34 AM UTC

Would be interesting to run this through Malus [1] or literally just Claude Code and get open source Claude Code out of it.

I jest, but in a world where these models have been trained on gigatons of open source I don't even see the moral problem. IANAL, don't actually do this.

https://malus.sh/

Re: Claude Code's source code has been leaked via a map file in their NPM registry

#20

Post by NitpickLawyer » Tue, Mar 31, 2026, 9:36 AM UTC

avaer wrote: post #19

Would be interesting to run this through Malus [1] or literally just Claude Code and get open source Claude Code out of it. I jest, but in a world where these models have been trained on gigatons of open source I don't even see the moral problem. IANAL, don't actually do this. https://malus.sh/

The problem is the oauth and their stance on bypassing that. You'd want to use your subscription, and they probably can detect that and ban users. They hold all the power there.