Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Claude Code's source code has been leaked via a map file in their NPM registry

twitter.com

Post reply on HN
Print view View original

651–660 of 1001 posts

Re: Claude Code's source code has been leaked via a map file in their NPM registry

#651

Post by firloop »

hanspagel wrote: post #629
foob wrote: post #552

Amusingly, they deprecated it with a message of "Unpublished" instead of actually unpublishing it [1]. When you use npm unpublish it removes the package version from the registry, when you use npm deprecate it leaves it there and simply marks the package as deprecated with your message. I have to imagine the point was to make it harder for people to download the source map, so to deprecate it with this message gives…

You can’t unpublish a npm package with more than 100 downloads I think.

Looks like Anthropic called in a favor and it's removed now.

Re: Claude Code's source code has been leaked via a map file in their NPM registry

#652

Post by sandipb »

rurban wrote: post #607
lanbin wrote: post #571

Earlier quoted context omitted.

Open Claude Code? Better than OpenCode and Codex

Not really. This guy expresses my feelings: https://www.youtube.com/watch?v=nxB4M3GlcWQ I also prefer codex over claude. But opencode is best. If you can use a good model. We can via Github Business Subscription.

The only issue I have with opencode is that it takes over the entire terminal, unlike claude code. Otherwise I love OC.

Re: Claude Code's source code has been leaked via a map file in their NPM registry

#653

Post by mattlangston »

Boris Cherny has said that Claude Code is simply a client of the public Claude API, so this may be a good thing for Anthropic to demonstrate Claude API best practices. Maybe CC "leaking" is just preparation for open sourcing Claude Code.

Re: Claude Code's source code has been leaked via a map file in their NPM registry

#654

Post by WarmWash »

j2kun wrote: post #567
0x3f wrote: post #134

Earlier quoted context omitted.

You'll never win this battle, so why waste feelings and energy on it? That's where the internet is headed. There's no magical human verification technology coming to save us.

Fatalism will also not fix anything. But I suppose death comes for us all, yes? Why do anything at all?

I think "adapt or die" is the takeaway.

Re: Claude Code's source code has been leaked via a map file in their NPM registry

#655

Post by jen20 »

BoppreH wrote: post #113

Undercover mode also pretends to be human, which I'm less ok with: https://github.com/chatgptprojects/claude-code/blob/642c7f94...

Also unintentionally reveals something:

> Write commit messages as a human developer would — describe only what the code change does.

That's not what a commit message is for, that's what the diff is for. The commit message should explain WHY.

Sadly not doing that likely does indeed make it appear more human...

Re: Claude Code's source code has been leaked via a map file in their NPM registry

#656

Post by skeledrew »

kingstnap wrote: post #250
shaky-carrousel wrote: post #166

Earlier quoted context omitted.

> Write commit messages as a human developer would — describe only what the code change does. The undercover mode prompt was generated using AI.

All these companies use AIs for writing these prompts. But AI aren't actually very good at writing prompts imo. Like they are superficially good in that they seem to produce lots of vaguely accurate and specific text. And you would hope the specificity would mean it's good. But they sort of don't capture intent very well. Nor do they seem to understand the failure modes of AI. The "-- describe only what the code chan…

All the prompts I've ever written with Claude have always worked fine the first time. Only revised if the actual purpose changes, I left something out, etc. But also I tend to only write prompts as part of a larger session, usually near the end, so there's lots of context available to help with the writing.

Re: Claude Code's source code has been leaked via a map file in their NPM registry

#657

Post by nunez »

nunez wrote: post #489
arcfour wrote: post #368

Earlier quoted context omitted.

You're perfectly free to scrape the web yourself and train your own model. You're not free to let Anthropic do that work for you, because they don't want you to, because it cost them a lot of time and money and secret sauce presumably filtering it for quality and other stuff. Stole? Courts have ruled it's transformative, and it very obviously is. AI doomerism is exhausting, and I don't even use AI that much, it's jus…

Lol; like heck we are. Try scraping the NYTimes at LLM scale. You can time how quickly you’ll get 420’ed or, at worst, hit with a C&D.

(429'ed, I meant)

Re: Claude Code's source code has been leaked via a map file in their NPM registry

#658

Post by jmward01 »

I hope this can now be audited better. I have doubted their feedback promises for a while now. I just got prompted again even though I have everything set to disable, which shouldn't be possible. When I dug into their code a long time ago on this it seemed like they were actually sending back message ids with the survey which directly went against their promise that they wouldn't use your messages. Why include a message id if you aren't somehow linking it back to a message? The code look, not great, but it should now be easier to verify their claims about privacy.

Re: Claude Code's source code has been leaked via a map file in their NPM registry

#659

Post by tomjakubowski »

monooso wrote: post #504
chillfox wrote: post #443

Earlier quoted context omitted.

It's not a parody when they accept money and deliver the service.

Dumb Starbucks begs to differ. https://en.wikipedia.org/wiki/Dumb_Starbucks

And we know they're right, because that lawyer signed a contract on TV saying he'd be liable if they were wrong.

Re: Claude Code's source code has been leaked via a map file in their NPM registry

#660

Post by SV_BubbleTime »

firloop wrote: post #651
hanspagel wrote: post #629

Earlier quoted context omitted.

You can’t unpublish a npm package with more than 100 downloads I think.

Looks like Anthropic called in a favor and it's removed now.

Ah, another you can’t, but they can.

I’m still a little humored over peak web3 and the DAO / soft contract nonsense. Like in order to stop fraud entire coins were forked…

Post reply on HN