Live data from Hacker News

Claude Code's source code has been leaked via a map file in their NPM registry

twitter.com

131–140 of 1001 posts

Re: Claude Code's source code has been leaked via a map file in their NPM registry

#131
post #84

They have an interesting regex for detecting negative sentiment in users prompt which is then logged (explicit content): https://github.com/chatgptprojects/claude-code/blob/642c7f94... I guess these words are to be avoided...

An LLM company using regexes for sentiment analysis? That's like a truck company using horses to transport parts. Weird choice.

Good to have more than a hammer in your toolbox!

Re: Claude Code's source code has been leaked via a map file in their NPM registry

#132

Earlier quoted context omitted.

They're searching for multiple substrings in a single pass, regexes are the optimal solution for that.

It's fast, but it'll miss a ton of cases. This feels like it would be better served by a prompt instruction, or an additional tiny neural network. And some of the entries are too short and will create false positives. It'll match the word "offset" ("ffs"), for example. EDIT: no it won't, I missed the \b. Still sounds weird to me.

The pattern only matches if both ends are word boundaries. So "diffs" won't match, but "Oh, ffs!" will. It's also why they had to use the pattern "shit(ty|tiest)" instead of just "shit".

Re: Claude Code's source code has been leaked via a map file in their NPM registry

#133

Was searching for the rumored Mythos/Capybara release, and what even is this file? https://github.com/chatgptprojects/claude-code/blob/642c7f94...

turns out its for an April fools tomorrow: https://x.com/mesmerlord/status/2038938888178135223

Re: Claude Code's source code has been leaked via a map file in their NPM registry

#134

Undercover mode also pretends to be human, which I'm less ok with: https://github.com/chatgptprojects/claude-code/blob/642c7f94...

You'll never win this battle, so why waste feelings and energy on it? That's where the internet is headed. There's no magical human verification technology coming to save us.

Re: Claude Code's source code has been leaked via a map file in their NPM registry

#135

Earlier quoted context omitted.

It's fast, but it'll miss a ton of cases. This feels like it would be better served by a prompt instruction, or an additional tiny neural network. And some of the entries are too short and will create false positives. It'll match the word "offset" ("ffs"), for example. EDIT: no it won't, I missed the \b. Still sounds weird to me.

The pattern only matches if both ends are word boundaries. So "diffs" won't match, but "Oh, ffs!" will. It's also why they had to use the pattern "shit(ty|tiest)" instead of just "shit".

You're right, I missed the \b's. Thanks for the correction.

Re: Claude Code's source code has been leaked via a map file in their NPM registry

#136
post #95
post #86

Earlier quoted context omitted.

won't they just try to dmca or take these down especially if they're more popular

They can't. AI generated code cannot be copyrighted. They've stated that claude code is built with claude code. You can take this and start your own claude code project now if you like. There's zero copyright protection on this.

I'm sure it's not _entirely_ built that way, and in practically speaking GitHub will almost certainly take it down rather than doing some kind of deep research about which code is which.

Re: Claude Code's source code has been leaked via a map file in their NPM registry

#138

Earlier quoted context omitted.

An LLM company using regexes for sentiment analysis? That's like a truck company using horses to transport parts. Weird choice.

what you are suggesting would be like a truck company using trucks to move things within the truck

That’s what they do. Ever heard of a hand truck?

Re: Claude Code's source code has been leaked via a map file in their NPM registry

#140
post #19

Would be interesting to run this through Malus [1] or literally just Claude Code and get open source Claude Code out of it. I jest, but in a world where these models have been trained on gigatons of open source I don't even see the moral problem. IANAL, don't actually do this. https://malus.sh/

Oh god, I was so close to believing Malus was a real product and not satire.
Post reply on HN