Live data from Hacker News

Claude Code's source code has been leaked via a map file in their NPM registry

twitter.com

161–170 of 1001 posts

Re: Claude Code's source code has been leaked via a map file in their NPM registry

#161
post #50

Earlier quoted context omitted.

Honestly when using it, it feels vibe coded to the bone, together with the matching weird UI footgun quirks

Team has been extremely open how it has been vibe coded from day 1. Given the insane amount of releases, I don’t think it would be possible without it.

It’s not a particularly sophisticated tool. I’d put my money on one experienced engineer being able to achieve the same functionality in 3-6 months (even without the vibe coding).

Re: Claude Code's source code has been leaked via a map file in their NPM registry

#162
post #18

Earlier quoted context omitted.

the "useCanUseTool.tsx" hook, is definitely something I would hate seeing in any code base I come across. It's extremely nested, it's basically an if statement soup `useTypeahead.tsx` is even worse, extremely nested, a ton of "if else" statements, I doubt you'd look at it and think this is sane code

Fits with the origin story of Claude Code...

insert "AI is just if statements" meme

Re: Claude Code's source code has been leaked via a map file in their NPM registry

#163
post #138

Earlier quoted context omitted.

what you are suggesting would be like a truck company using trucks to move things within the truck

That’s what they do. Ever heard of a hand truck?

I never knew the name of that device.

Thanks

Re: Claude Code's source code has been leaked via a map file in their NPM registry

#165
post #137

In the app, it now reads: > current: 2.1.88 · latest: 2.1.87 Which makes me think they pulled it - although it still shows up as 2.1.88 on npmjs for now (cached?).

Too little to late. Someone has it building now.

https://github.com/oboard/claude-code-rev

Re: Claude Code's source code has been leaked via a map file in their NPM registry

#166

Undercover mode also pretends to be human, which I'm less ok with: https://github.com/chatgptprojects/claude-code/blob/642c7f94...

> Write commit messages as a human developer would — describe only what the code change does.

The undercover mode prompt was generated using AI.

Re: Claude Code's source code has been leaked via a map file in their NPM registry

#167
post #148
post #19

Would be interesting to run this through Malus [1] or literally just Claude Code and get open source Claude Code out of it. I jest, but in a world where these models have been trained on gigatons of open source I don't even see the moral problem. IANAL, don't actually do this. https://malus.sh/

Malus is not a real project btw, it's a parody: “Let's end open source together with this one simple trick” https://pretalx.fosdem.org/fosdem-2026/talk/SUVS7G/feedback/ Malus is translating code into text, and from text back into code. It gives the illusion of clean room implementation that some companies abuse. The irony is that ChatGPT/Claude answers are all actually directly derived from open-source code, so...

They accept real money though.

https://www.youtube.com/watch?v=6godSEVvcmU

Re: Claude Code's source code has been leaked via a map file in their NPM registry

#168
post #84

They have an interesting regex for detecting negative sentiment in users prompt which is then logged (explicit content): https://github.com/chatgptprojects/claude-code/blob/642c7f94... I guess these words are to be avoided...

An LLM company using regexes for sentiment analysis? That's like a truck company using horses to transport parts. Weird choice.

I used regexes in a similar way but my implementation was vibecoded, hmmm, using your analysis Claude Code writes code by hand.

Re: Claude Code's source code has been leaked via a map file in their NPM registry

#169

Earlier quoted context omitted.

An LLM company using regexes for sentiment analysis? That's like a truck company using horses to transport parts. Weird choice.

Because they want it to be executed quickly and cheaply without blocking the workflow? Doesn’t seem very weird to me at all.

They probably have statistics on it and saw that certain phrases happen over and over so why waste compute on inference.

Re: Claude Code's source code has been leaked via a map file in their NPM registry

#170
post #84

They have an interesting regex for detecting negative sentiment in users prompt which is then logged (explicit content): https://github.com/chatgptprojects/claude-code/blob/642c7f94... I guess these words are to be avoided...

Ridiculous string comparisons on long chains of logic are a hallmark of vibe-coding.
Post reply on HN