Live data from Hacker News

Claude Code's source code has been leaked via a map file in their NPM registry

twitter.com

61–70 of 1001 posts

Re: Claude Code's source code has been leaked via a map file in their NPM registry

#61

Why is Claude Code, a desktop tool, written in JS? Is the future of all software JS or Typescript?

It's not a desktop tool, it's a CLI tool.

But a lot of desktop tools are written in JS because it's easy to create multi-platform applications.

Re: Claude Code's source code has been leaked via a map file in their NPM registry

#62
post #7

The big loss for Anthropic here is how it reveals their product roadmap via feature flags. A big one is their unreleased "assistant mode" with code name kairos. Just point your agent at this codebase and ask it to find things and you'll find a whole treasure trove of info. Edit: some other interesting unreleased/hidden features - The Buddy System: Tamagotchi-style companion creature system with ASCII art sprites - Un…

[deleted]

Re: Claude Code's source code has been leaked via a map file in their NPM registry

#63
post #43
post #35

Codex and gemini cli are open source already. And plenty of other agents. I don't think there is any moat in claude code source.

Well, Claude does boast an absolutely cursed (and very buggy) React-based TUI renderer that I think the others lack! What if someone steals it and builds their own buggy TUI app?

Your favorite LLM is great at building a super buggy renderer, so that's no longer a moat

Re: Claude Code's source code has been leaked via a map file in their NPM registry

#64
post #9

The code looks, at a glance, as bad as you expect.

It really doesn’t matter anymore. I’m saying this as a person who used to care about it. It does what it’s generally supposed to do, it has users. Two things that matter at this day and age.

This is the dumbest take there is about vibe coding. Claiming that managing complexity in a codebase doesn't matter anymore. I can't imagine that a competent engineer would come to the conclusion that managing complexity doesn't matter anymore. There is actually some evidence that coding agents struggle the same way humans do as the complexity of the system increases [0].

[0] https://arxiv.org/abs/2603.24755

Re: Claude Code's source code has been leaked via a map file in their NPM registry

#65
post #19

Would be interesting to run this through Malus [1] or literally just Claude Code and get open source Claude Code out of it. I jest, but in a world where these models have been trained on gigatons of open source I don't even see the moral problem. IANAL, don't actually do this. https://malus.sh/

The problem is the oauth and their stance on bypassing that. You'd want to use your subscription, and they probably can detect that and ban users. They hold all the power there.

Could you use claude via aws bedrock?

Re: Claude Code's source code has been leaked via a map file in their NPM registry

#66
post #9

The code looks, at a glance, as bad as you expect.

It really doesn’t matter anymore. I’m saying this as a person who used to care about it. It does what it’s generally supposed to do, it has users. Two things that matter at this day and age.

It may be economically effective but such heartless, buggy software is a drain to use. I care about that delta, and yes this can be extrapolated to other industries.

Re: Claude Code's source code has been leaked via a map file in their NPM registry

#67

LoL! https://news.ycombinator.com/item?id=30337690 Not exactly this, but close.

> It exposes all your frontend source code for everyone

I hope it's a common knowledge that _any_ client side JavaScript is exposed to everyone. Perhaps minimized, but still easily reverse-engineerable.

Re: Claude Code's source code has been leaked via a map file in their NPM registry

#68
post #31
post #7

The big loss for Anthropic here is how it reveals their product roadmap via feature flags. A big one is their unreleased "assistant mode" with code name kairos. Just point your agent at this codebase and ask it to find things and you'll find a whole treasure trove of info. Edit: some other interesting unreleased/hidden features - The Buddy System: Tamagotchi-style companion creature system with ASCII art sprites - Un…

(spoiler alert) Buddy system is this year's April Fool's joke, you roll your own gacha pet that you get to keep. There are legendary pulls. They expect it to go viral on Twitter so they are staggering the reveals.

You heard it here first

Re: Claude Code's source code has been leaked via a map file in their NPM registry

#69

    ANTI_DISTILLATION_CC
    
    This is Anthropic's anti-distillation defence baked into Claude Code. When enabled, it injects anti_distillation: ['fake_tools'] into every API request, which causes the server to silently slip decoy tool definitions into the model's system prompt. The goal: if someone is scraping Claude Code's API traffic to train a competing model, the poisoned training data makes that distillation attempt less useful.
Post reply on HN