Live data from Hacker News

Claude Code's source code has been leaked via a map file in their NPM registry

twitter.com

481–490 of 1001 posts

Re: Claude Code's source code has been leaked via a map file in their NPM registry

#481

Earlier quoted context omitted.

Because they want it to be executed quickly and cheaply without blocking the workflow? Doesn’t seem very weird to me at all.

They probably have statistics on it and saw that certain phrases happen over and over so why waste compute on inference.

More likely their LLM Agent just produced that regex and they didn't even notice.

Re: Claude Code's source code has been leaked via a map file in their NPM registry

#482
post #148

Earlier quoted context omitted.

Malus is not a real project btw, it's a parody: “Let's end open source together with this one simple trick” https://pretalx.fosdem.org/fosdem-2026/talk/SUVS7G/feedback/ Malus is translating code into text, and from text back into code. It gives the illusion of clean room implementation that some companies abuse. The irony is that ChatGPT/Claude answers are all actually directly derived from open-source code, so...

First time I hear about this, it's interesting to have written all of this out. Now this makes me think of game decompilation projects, which would seem to fall in the same legal area as code that would be generated by something like Malus. Different code, same end result (binary or api). We definitely need to know what the legal limits are and should be

Semi-related, someone made basically Malus-for-San-Andreas: https://www.youtube.com/watch?v=zBQJYMKmwAs

Re: Claude Code's source code has been leaked via a map file in their NPM registry

#483

Went through the bundle.js. Found 187 spinner verbs. "Combobulating", "Discombobulating", and "Recombobulating". The full lifecycle is covered. Also "Flibbertigibbeting" and "Clauding". Someone had fun.

Let's hope they left the having-fun part for a human to do.

Re: Claude Code's source code has been leaked via a map file in their NPM registry

#484
post #138

Earlier quoted context omitted.

That’s what they do. Ever heard of a hand truck?

Do we have a hand llm perchance?

Yeah it’s called a regex. With a lot of human assistance it can do less but fits in smaller spaces and doesn’t break down.

Re: Claude Code's source code has been leaked via a map file in their NPM registry

#485
post #302

Earlier quoted context omitted.

They stole everything and now they want to close the gates behind them. "I got the loot, Steve!" I feel like the distillation stuff will end up in court if they try to sue an American company about it. We'll see what a judge says.

You're perfectly free to scrape the web yourself and train your own model. You're not free to let Anthropic do that work for you, because they don't want you to, because it cost them a lot of time and money and secret sauce presumably filtering it for quality and other stuff. Stole? Courts have ruled it's transformative, and it very obviously is. AI doomerism is exhausting, and I don't even use AI that much, it's jus…

"...free to scrape the web yourself and train your own model."

Yes, rich and poor are equally forbidden from sleeping under bridges.

Re: Claude Code's source code has been leaked via a map file in their NPM registry

#486
post #148

Earlier quoted context omitted.

Malus is not a real project btw, it's a parody: “Let's end open source together with this one simple trick” https://pretalx.fosdem.org/fosdem-2026/talk/SUVS7G/feedback/ Malus is translating code into text, and from text back into code. It gives the illusion of clean room implementation that some companies abuse. The irony is that ChatGPT/Claude answers are all actually directly derived from open-source code, so...

First time I hear about this, it's interesting to have written all of this out. Now this makes me think of game decompilation projects, which would seem to fall in the same legal area as code that would be generated by something like Malus. Different code, same end result (binary or api). We definitely need to know what the legal limits are and should be

i think most game decompilation projects are either openly illegal or operate on "provide your own binary" and build automatic tooling around it

Re: Claude Code's source code has been leaked via a map file in their NPM registry

#487
post #261

Earlier quoted context omitted.

No real reason to do that, they say Claude Code is written by Claude, which means it has no copyright. Just use the code directly

What about trade secrets, breach of contract, etc, etc?

Trade secrets once made public don't have any legal protection and I haven't signed any contract with anthropic

Re: Claude Code's source code has been leaked via a map file in their NPM registry

#488

Really surprising how many people are downplaying this leak! "Google and OpenAi have already open sourced their Agents, so this leak isn't that relevant " What Google and OpenAi have open sourced is their Agents SDK, a toolkit, not the secret sauce of how their flagship agents are wired under the hood! expect the takedown hammer on the tweet, the R2 link, and any public repos soon

Agreed. This is a big deal.

Re: Claude Code's source code has been leaked via a map file in their NPM registry

#489
post #302

Earlier quoted context omitted.

They stole everything and now they want to close the gates behind them. "I got the loot, Steve!" I feel like the distillation stuff will end up in court if they try to sue an American company about it. We'll see what a judge says.

You're perfectly free to scrape the web yourself and train your own model. You're not free to let Anthropic do that work for you, because they don't want you to, because it cost them a lot of time and money and secret sauce presumably filtering it for quality and other stuff. Stole? Courts have ruled it's transformative, and it very obviously is. AI doomerism is exhausting, and I don't even use AI that much, it's jus…

Lol; like heck we are. Try scraping the NYTimes at LLM scale. You can time how quickly you’ll get 420’ed or, at worst, hit with a C&D.
Post reply on HN