Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Claude Code's source code has been leaked via a map file in their NPM registry

twitter.com

Post reply on HN
Print view View original

391–400 of 1001 posts

Re: Claude Code's source code has been leaked via a map file in their NPM registry

#391

Post by PunchyHamster »

spoiler wrote: post #141
kschiffer wrote: post #119

Finally all spinner verbs revealed: https://github.com/instructkr/claude-code/blob/main/src/cons...

Random aside: I've seen a 2015 game be accused of AI slop on Steam because it used a similar concept... And mind you, there's probably thousands of games that do this. First it was punctuation and grammar, then linguistic coherence, and now it's tiny bits of whimsy that are falling victim to AI accusations. Good fucking grief

All that is needed to solve that is to reliably put AI disclaimer on things done by AI

Which of course won't be done because corporations don't want that (except Valve I guess), so blame them.

Re: Claude Code's source code has been leaked via a map file in their NPM registry

#392

Post by armanj »

arrsingh wrote: post #370

I don't understand why claude code (and all CLI apps) isn't written in Rust. I started building CLI agents in Go and then moved to Typescript and finally settled on Rust and it was amazing! I even made it into an open source runtime - https://agent-air.ai . Maybe I'm just a backend engineer so Rust appeals to me. What am I missing?

claude code started as an experimental project by boris cherny. when you’re experimenting, you naturally use the language you’re most comfortable with. as the project grew, more people got involved and it evolved from there. codex, on the other hand, was built from the start specifically to compete with claude code. they chose rust early on because they knew it was going to be big.

Re: Claude Code's source code has been leaked via a map file in their NPM registry

#393

Post by lazysheepherd »

BoppreH wrote: post #113

Undercover mode also pretends to be human, which I'm less ok with: https://github.com/chatgptprojects/claude-code/blob/642c7f94...

1) This seems to be for strictly Antrophic interal tooling 2) It does not "pretend to be human" it is instructed to "Write commit messages as a human developer would — describe only what the code change does."

Since when "describe only what the code change does" is pretending to be human?

You guys are just mining for things to moan about at this point.

Re: Claude Code's source code has been leaked via a map file in their NPM registry

#394

Post by nhubbard »

mutkach wrote: post #337

/* * Check if 1M context is disabled via environment variable. * Used by C4E admins to disable 1M context for HIPAA compliance. */ export function is1mContextDisabled(): boolean { return isEnvTruthy(process.env.CLAUDE_CODE_DISABLE_1M_CONTEXT) } Interesting, how is that relevant to HIPAA compliance?

I'd guess some constraint on their end related to the Zero Data Retention (ZDR) mode? Maybe the 1M context has to spill something onto disk and therefore isn't compliant with HIPAA.

Re: Claude Code's source code has been leaked via a map file in their NPM registry

#395

Post by petcat »

arcfour wrote: post #368
petcat wrote: post #302

Earlier quoted context omitted.

They stole everything and now they want to close the gates behind them. "I got the loot, Steve!" I feel like the distillation stuff will end up in court if they try to sue an American company about it. We'll see what a judge says.

You're perfectly free to scrape the web yourself and train your own model. You're not free to let Anthropic do that work for you, because they don't want you to, because it cost them a lot of time and money and secret sauce presumably filtering it for quality and other stuff. Stole? Courts have ruled it's transformative, and it very obviously is. AI doomerism is exhausting, and I don't even use AI that much, it's jus…

> Stole? Courts have ruled it's transformative, and it very obviously is.

The courts have ruled that AI outputs are not copyrightable. The courts have also ruled that scraping by itself is not illegal, only maybe against a Terms of Service. Therefore, Anthropic, OpenAI, Google, etc. have no legal claim to any proprietary protections of their model outputs.

So we have two things that are true:

1) Anthropic (certainly) violated numerous TOS by scraping all of the internet, not just public content.

2) Scraping Anthropic's model outputs is no different than what Anthropic already did. Only a TOS violation.

Re: Claude Code's source code has been leaked via a map file in their NPM registry

#396

Post by yoz-y »

Bayko wrote: post #212
phtrivier wrote: post #150

Earlier quoted context omitted.

Yes, if it was made for human comprehension or maintenance. If it's entirely generated / consumed / edited by an LLM, arguably the most important metric is... test coverage, and that's it ?

Ye I honestly don't understand his comment. Is it bad code writing? Pre 2026? Sure. In 2026. Nope. Is it going to be a headache for some poor person on oncall? Yes. But then again are you "supposed" to go through every single line in 2026? Again no. I hate it. But the world is changing and till the bubble pops this is the new norm

The jury on this one is still out.

Re: Claude Code's source code has been leaked via a map file in their NPM registry

#399

Post by hmokiguess »

bob1029 wrote: post #11

Is this significant? Copilot on OAI reveals everything meaningful about its functionality if you use a custom model config via the API. All you need to do is inspect the logs to see the prompts they're using. So far no one seems to care about this "loophole". Presumably, because the only thing that matters is for you to consume as many tokens per unit time as possible. The source code of the slot machine is not relev…

That’s not a good analogy, in a casino you don’t own the slot machine, in this case you download the client side code to your machine
Post reply on HN