Once the USA wakes up, this will be insane news
Claude Code's source code has been leaked via a map file in their NPM registry
71–80 of 1001 posts
Re: Claude Code's source code has been leaked via a map file in their NPM registry
#72LoL! https://news.ycombinator.com/item?id=30337690 Not exactly this, but close.
> It exposes all your frontend source code for everyone I hope it's a common knowledge that _any_ client side JavaScript is exposed to everyone. Perhaps minimized, but still easily reverse-engineerable.
Very easily these days, even if minified is difficult for me to reverse engineer... Claude has a very easy time of finding exactly what to patch to fix something
Re: Claude Code's source code has been leaked via a map file in their NPM registry
#73Re: Claude Code's source code has been leaked via a map file in their NPM registry
#74Earlier quoted context omitted.
It really doesn’t matter anymore. I’m saying this as a person who used to care about it. It does what it’s generally supposed to do, it has users. Two things that matter at this day and age.
It may be economically effective but such heartless, buggy software is a drain to use. I care about that delta, and yes this can be extrapolated to other industries.
Genuinely I have no idea what you mean by buggy. Sure there are some problems here and there, but my personal threshold for “buggy” is much higher. I guess, for a lot of other people as well, given the uptake and usage.
Re: Claude Code's source code has been leaked via a map file in their NPM registry
#75The big loss for Anthropic here is how it reveals their product roadmap via feature flags. A big one is their unreleased "assistant mode" with code name kairos. Just point your agent at this codebase and ask it to find things and you'll find a whole treasure trove of info. Edit: some other interesting unreleased/hidden features - The Buddy System: Tamagotchi-style companion creature system with ASCII art sprites - Un…
(spoiler alert) Buddy system is this year's April Fool's joke, you roll your own gacha pet that you get to keep. There are legendary pulls. They expect it to go viral on Twitter so they are staggering the reveals.
So close to April Fool's too. I'm sure it will still be a surprise for a majority of their users.
Re: Claude Code's source code has been leaked via a map file in their NPM registry
#76Earlier quoted context omitted.
It really doesn’t matter anymore. I’m saying this as a person who used to care about it. It does what it’s generally supposed to do, it has users. Two things that matter at this day and age.
This is the dumbest take there is about vibe coding. Claiming that managing complexity in a codebase doesn't matter anymore. I can't imagine that a competent engineer would come to the conclusion that managing complexity doesn't matter anymore. There is actually some evidence that coding agents struggle the same way humans do as the complexity of the system increases [0]. [0] https://arxiv.org/abs/2603.24755
I agree, there is obviously “complete burning trash” and there’s this. Ant team has got a system going on for them where they can still extend the codebase. When time comes to it, I’m assuming they would be able to rewrite as feature set would be more solid and assuming they’ve been adding tests as well.
Reverse-engineering through tests have never been easier, which could collapse the complexity and clean the code.
Re: Claude Code's source code has been leaked via a map file in their NPM registry
#77Earlier quoted context omitted.
The problem is the oauth and their stance on bypassing that. You'd want to use your subscription, and they probably can detect that and ban users. They hold all the power there.
Just use one of the distilled claude clones instead https://x.com/0xsero/status/2038021723719688266?s=46
"Approach Sonnet"...
So not even close to Opus, then?
These are a year behind, if not more. And they're probably clunky to use.
Re: Claude Code's source code has been leaked via a map file in their NPM registry
#78Re: Claude Code's source code has been leaked via a map file in their NPM registry
#79Earlier quoted context omitted.
It really doesn’t matter anymore. I’m saying this as a person who used to care about it. It does what it’s generally supposed to do, it has users. Two things that matter at this day and age.
[flagged]
“It works and it’s doing what it’s supposed to do” encompasses the idea that it’s also not doing what it’s not supposed to do.
Also “one bad incident away” never works in practice. The last two decades have shown how people will use the tools that get the job done no matter what kinda privacy leaks, destructive things they have done to the user.
Re: Claude Code's source code has been leaked via a map file in their NPM registry
#80I wonder what will happen with the poor guy who forgot to delete the code...
[deleted]