Live data from Hacker News

Claude Code's source code has been leaked via a map file in their NPM registry

twitter.com

431–440 of 1001 posts

Re: Claude Code's source code has been leaked via a map file in their NPM registry

#431
post #199

Earlier quoted context omitted.

Then they made it wrong. For example, "What the actual fuck?" is not getting flagged, neither is "What the *fuck*".

Classic over-engineering. Their approach is just fine 90% of the time for the use case it’s intended for.

75-80% [1], 90%, 99% [2]. In other words, no one has any idea.

I doubt it's anywhere that high because even if you don't write anything fancy and simply capitalize the first word like you'd normally do at the beginning of a sentence, the regex won't flag it.

Anyway, I don't really care, might just as well be 99.99%. This is not a hill I'm going to die on :P

[1]: https://news.ycombinator.com/item?id=47587286

[2]: https://news.ycombinator.com/item?id=47586932

Re: Claude Code's source code has been leaked via a map file in their NPM registry

#432
post #84

They have an interesting regex for detecting negative sentiment in users prompt which is then logged (explicit content): https://github.com/chatgptprojects/claude-code/blob/642c7f94... I guess these words are to be avoided...

so they think that everybody on earth swears only in english?

Re: Claude Code's source code has been leaked via a map file in their NPM registry

#433

Earlier quoted context omitted.

Everyone is commenting how this regex is actually a master optimization move by Anthropic When in reality this is just what their LLM coding agent came up with when some engineer told it to "log user frustration"

>Everyone is commenting how this regex is actually a master optimization move by Anthropic No? I'd say not even 50% of the comments are positive right now.

Could you share the regex you used to come up with that sentiment analysis?

Re: Claude Code's source code has been leaked via a map file in their NPM registry

#434
post #261
post #19

Would be interesting to run this through Malus [1] or literally just Claude Code and get open source Claude Code out of it. I jest, but in a world where these models have been trained on gigatons of open source I don't even see the moral problem. IANAL, don't actually do this. https://malus.sh/

No real reason to do that, they say Claude Code is written by Claude, which means it has no copyright. Just use the code directly

What about trade secrets, breach of contract, etc, etc?

Re: Claude Code's source code has been leaked via a map file in their NPM registry

#435
post #286

Earlier quoted context omitted.

It's how people resisted CGI back in the day. What people dislike is low quality. There is a loud subset who are really against it on principle like we also have people who insist on analog music but regular people are much more practical but they don't post about this all day on the internet.

I think literally everyone could agree CGI has been detrimental to the quality of films.

I could maybe agree in the sense of "has had detrimental effects", but certainly not in the sense of "net detrimental".

Re: Claude Code's source code has been leaked via a map file in their NPM registry

#436

src/cli/print.ts This is the single worst function in the codebase by every metric: - 3,167 lines long (the file itself is 5,594 lines) - 12 levels of nesting at its deepest - ~486 branch points of cyclomatic complexity - 12 parameters + an options object with 16 sub-properties - Defines 21 inner functions and closures - Handles: agent run loop, SIGINT, rate-limits, AWS auth, MCP lifecycle, plugin install/refresh, wo…

"That's Larry; he does most of the work around here."

lmao

Re: Claude Code's source code has been leaked via a map file in their NPM registry

#437
post #7

The big loss for Anthropic here is how it reveals their product roadmap via feature flags. A big one is their unreleased "assistant mode" with code name kairos. Just point your agent at this codebase and ask it to find things and you'll find a whole treasure trove of info. Edit: some other interesting unreleased/hidden features - The Buddy System: Tamagotchi-style companion creature system with ASCII art sprites - Un…

Note also the "Claude Capybara" reference in the undercover prompt: https://github.com/chatgptprojects/claude-code/blob/642c7f94...

This seems like a good way to weed out models: ask them to include the term capybara in their commit messages

Re: Claude Code's source code has been leaked via a map file in their NPM registry

#438
post #134

Earlier quoted context omitted.

You'll never win this battle, so why waste feelings and energy on it? That's where the internet is headed. There's no magical human verification technology coming to save us.

Even if it is impossible to win, I am still feeling bad about it. And at this point it is more about how large space will be usable and how much will be bot-controlled wasteland. I prefer spaces important for me to survive.

Feeling bad about something you can’t change is bad for your mental health.

Re: Claude Code's source code has been leaked via a map file in their NPM registry

#439

Earlier quoted context omitted.

Think about your question, depending on the tool, Rust might not be needed, is high level memory performance and safety needed in a coding agent ? Probably not. It's high speed iteration of release ? Might be needed, Interpreted or JIT compiled ? might be needed. Without knowing all the requirements its just your workspace preference making your decision and not objectively the right tool for the job.

While not directly related to GP, I would guess that a codebase developped with a coding agent (I assume Claude code is used to work on itself) would benefit from a stricter type system (one important point of Rust)

TypeScript is typed.. It's in the name ?

Re: Claude Code's source code has been leaked via a map file in their NPM registry

#440
post #302
post #290

Earlier quoted context omitted.

Paranoia. And also ironic considering their base LLM is a distillation of the web and books etc etc.

They stole everything and now they want to close the gates behind them. "I got the loot, Steve!" I feel like the distillation stuff will end up in court if they try to sue an American company about it. We'll see what a judge says.

Also, begging to get "regulated":

https://x.com/TheChiefNerd/status/2038565951268946021

Post reply on HN