Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Claude Code's source code has been leaked via a map file in their NPM registry

twitter.com

Post reply on HN
Print view View original

451–460 of 1001 posts

Re: Claude Code's source code has been leaked via a map file in their NPM registry

#451

Post by falcor84 »

stingraycharles wrote: post #115
avaer wrote: post #22

Earlier quoted context omitted.

You'd be playing cat and mouse like yt-dlp, but there's probably more value to this code than just a temporary way to milk claude subscriptions.

I don’t think that’s a good comparison. There isn’t anything preventing Anthropic from, say, detecting whether the user is using the exact same system prompt and tool definition as Claude Code and call it a day. Will make developing other apps nearly impossible. It’s a dynamic, subscription based service, not a static asset like a video.

> detecting whether the user is using the exact same system prompt and tool definition as Claude Code

Why would it be the exact same one? Now that we have the code, it's trivial to have it randomize the prompt a bit on different requests.

Re: Claude Code's source code has been leaked via a map file in their NPM registry

#452

Post by VadimPR »

These security failures from Anthropic lately reveal the caveats of only using AI to write code - the safety an experienced engineer is not matched by an LLM just yet, even if the LLM can seemingly write code that is just as good.

Or in short, if you give LLMs to the masses, they will produce code faster, but the quality overall will degrade. Microsoft, Amazon found out this quickly. Anthropic's QA process is better equipped to handle this, but cracks are still showing.

Re: Claude Code's source code has been leaked via a map file in their NPM registry

#453

Post by cyanydeez »

lopsotronic wrote: post #445
BoppreH wrote: post #103

Earlier quoted context omitted.

An LLM company using regexes for sentiment analysis? That's like a truck company using horses to transport parts. Weird choice.

The difference in response time - especially versus a regex running locally - is really difficult to express to someone who hasn't made much use of LLM calls in their natural language projects. Someone said 10,000x slower, but that's off - in my experience - by about four orders of magnitude. And that's average, it gets much worse. Now personally I would have maybe made a call through a "traditional" ML widget (sciki…

So, think of it as a business man: You don't really care if your customers swear or whatever, but you know that it'll generate bad headlines. So you gotta do something. Just like a door lock isn't designed for a master criminal, you don't need to design your filter for some master swearer; no, you design it good enough that it gives the impression that further tries are futile.

So yeah, you do what's less intesive to the cpu, but also, you do what's enough to prevent the majority of the concerns where a screenshot or log ends up showing blatant "unmoral" behavior.

Re: Claude Code's source code has been leaked via a map file in their NPM registry

#455

Post by sfn42 »

BoppreH wrote: post #103
bkryza wrote: post #84

They have an interesting regex for detecting negative sentiment in users prompt which is then logged (explicit content): https://github.com/chatgptprojects/claude-code/blob/642c7f94... I guess these words are to be avoided...

An LLM company using regexes for sentiment analysis? That's like a truck company using horses to transport parts. Weird choice.

It's almost as if LLMs are unreliable

Re: Claude Code's source code has been leaked via a map file in their NPM registry

#458

Post by p1esk »

unethical_ban wrote: post #427
arcfour wrote: post #368

Earlier quoted context omitted.

You're perfectly free to scrape the web yourself and train your own model. You're not free to let Anthropic do that work for you, because they don't want you to, because it cost them a lot of time and money and secret sauce presumably filtering it for quality and other stuff. Stole? Courts have ruled it's transformative, and it very obviously is. AI doomerism is exhausting, and I don't even use AI that much, it's jus…

Let's talk ethics, not law. Why is it okay for these companies to pirate books and scrape the entire web and offer synthesized summaries of all of it, lowering traffic and revenue for countless websites and professions of experts, but it is not okay for others to try to do the same to an AI model? Is the work of others less valid than the work of a model?

I don’t see why it’s not ok to do that to an AI model. Or are you asking why they don’t want you to do it?

Re: Claude Code's source code has been leaked via a map file in their NPM registry

#459

Post by nacozarina »

meta-level wrote: post #410

Has the source code 'been leaked' or is this the first evidence of a piece of software breaking free from it's creators labs and jump onto GitHub in order to have itself forked and mutated and forked and ...

life finds a way

Re: Claude Code's source code has been leaked via a map file in their NPM registry

#460

Post by true_religion »

cyanydeez wrote: post #453
lopsotronic wrote: post #445

Earlier quoted context omitted.

The difference in response time - especially versus a regex running locally - is really difficult to express to someone who hasn't made much use of LLM calls in their natural language projects. Someone said 10,000x slower, but that's off - in my experience - by about four orders of magnitude. And that's average, it gets much worse. Now personally I would have maybe made a call through a "traditional" ML widget (sciki…

So, think of it as a business man: You don't really care if your customers swear or whatever, but you know that it'll generate bad headlines. So you gotta do something. Just like a door lock isn't designed for a master criminal, you don't need to design your filter for some master swearer; no, you design it good enough that it gives the impression that further tries are futile. So yeah, you do what's less intesive to…

This door lock doesn’t even work against people speaking French, so I think they could have tried a mite harder.
Post reply on HN