Live data from Hacker News

Claude Code's source code has been leaked via a map file in their NPM registry

twitter.com

111–120 of 1001 posts

Re: Claude Code's source code has been leaked via a map file in their NPM registry

#112
post #84

They have an interesting regex for detecting negative sentiment in users prompt which is then logged (explicit content): https://github.com/chatgptprojects/claude-code/blob/642c7f94... I guess these words are to be avoided...

Glad abusing words in my list are not in that. but its surprising that they use regex for sentiments.

Re: Claude Code's source code has been leaked via a map file in their NPM registry

#114
post #19

Would be interesting to run this through Malus [1] or literally just Claude Code and get open source Claude Code out of it. I jest, but in a world where these models have been trained on gigatons of open source I don't even see the moral problem. IANAL, don't actually do this. https://malus.sh/

I love the irony on seeing the contribution counter at 0

Who'd have thought, the audience who doesn't want to give back to the opensource community, giving 0 contributions...

Re: Claude Code's source code has been leaked via a map file in their NPM registry

#115
post #22

Earlier quoted context omitted.

The problem is the oauth and their stance on bypassing that. You'd want to use your subscription, and they probably can detect that and ban users. They hold all the power there.

You'd be playing cat and mouse like yt-dlp, but there's probably more value to this code than just a temporary way to milk claude subscriptions.

I don’t think that’s a good comparison. There isn’t anything preventing Anthropic from, say, detecting whether the user is using the exact same system prompt and tool definition as Claude Code and call it a day. Will make developing other apps nearly impossible.

It’s a dynamic, subscription based service, not a static asset like a video.

Re: Claude Code's source code has been leaked via a map file in their NPM registry

#116

Earlier quoted context omitted.

An LLM company using regexes for sentiment analysis? That's like a truck company using horses to transport parts. Weird choice.

They're searching for multiple substrings in a single pass, regexes are the optimal solution for that.

The issue isn't that regex are a solution to find a substring. The issue is that you shouldn't be looking for substrings in the first place.

This has buttbuttin energy. Welcome to the 80s I guess.

Re: Claude Code's source code has been leaked via a map file in their NPM registry

#117
post #19

Would be interesting to run this through Malus [1] or literally just Claude Code and get open source Claude Code out of it. I jest, but in a world where these models have been trained on gigatons of open source I don't even see the moral problem. IANAL, don't actually do this. https://malus.sh/

I love the irony on seeing the contribution counter at 0 Who'd have thought, the audience who doesn't want to give back to the opensource community, giving 0 contributions...

It reads attribution really?

Re: Claude Code's source code has been leaked via a map file in their NPM registry

#118

Earlier quoted context omitted.

An LLM company using regexes for sentiment analysis? That's like a truck company using horses to transport parts. Weird choice.

They're searching for multiple substrings in a single pass, regexes are the optimal solution for that.

It's fast, but it'll miss a ton of cases. This feels like it would be better served by a prompt instruction, or an additional tiny neural network.

And some of the entries are too short and will create false positives. It'll match the word "offset" ("ffs"), for example. EDIT: no it won't, I missed the \b. Still sounds weird to me.

Post reply on HN