Live data from Hacker News

Claude Code's source code has been leaked via a map file in their NPM registry

twitter.com

671–680 of 1001 posts

Re: Claude Code's source code has been leaked via a map file in their NPM registry

#671

Earlier quoted context omitted.

It’s not a particularly sophisticated tool. I’d put my money on one experienced engineer being able to achieve the same functionality in 3-6 months (even without the vibe coding).

Kinda reads like the Dropbox launch thread

[deleted]

Re: Claude Code's source code has been leaked via a map file in their NPM registry

#672
post #584

Earlier quoted context omitted.

>there is no point in code-reviewing ai-generated code the idea that you should just blindly trust code you are responsible for without bothering to review it is ludicrous.

Why?

Is this a serious question? If you are handling sensitive information how do you confirm your application is secure and won't leak or expose information to people who shouldn't know it?

Re: Claude Code's source code has been leaked via a map file in their NPM registry

#673
post #69

ANTI_DISTILLATION_CC This is Anthropic's anti-distillation defence baked into Claude Code. When enabled, it injects anti_distillation: ['fake_tools'] into every API request, which causes the server to silently slip decoy tool definitions into the model's system prompt. The goal: if someone is scraping Claude Code's API traffic to train a competing model, the poisoned training data makes that distillation attempt less…

I was thinking just yesterday that the research that Anthropic was sharing regarding how it's easy to poison training was unlikely to be conducted out of goodness of the heart.

Re: Claude Code's source code has been leaked via a map file in their NPM registry

#674

Earlier quoted context omitted.

I wish. Claude Code is clearly a pile of vibe-coded garbage. The UI is janky and jumps all over the place, especially during longer sessions. (Which also have a several second delay to render. In a terminal). Lately, it's been crashing if I hold the Backspace key down for too long. Being open-source would be the best thing to happen to them. At least they would finally get a pair of human eyes looking at their codeba…

I've actually heard a plausible theory about the TUI being janky, that being that they avoid use of the alternate screen feature of ANSI (and onwards) terminals. The theory states that Anthropic avoids using the alternate screen (which gives consuming applications access to a clear buffer with no shell prompt that they can do what they want with and drop at their leisure) because the alternate screen has no scrollbac…

Not disagreeing but scrolling works just fine in vim/emacs/etc. Wouldn't it be just managing the scroll back buffer yourself rather than the terminals?

Re: Claude Code's source code has been leaked via a map file in their NPM registry

#675

Earlier quoted context omitted.

It’s not a particularly sophisticated tool. I’d put my money on one experienced engineer being able to achieve the same functionality in 3-6 months (even without the vibe coding).

Kinda reads like the Dropbox launch thread

[deleted]

Re: Claude Code's source code has been leaked via a map file in their NPM registry

#676
post #571

I think this is ultimately caused by a Bun bug which I reported, which means source maps are exposed in production: https://github.com/oven-sh/bun/issues/28001 Claude code uses (and Anthropic owns) Bun, so my guess is they're doing a production build, expecting it not to output source maps, but it is.

Open Claude Code? Better than OpenCode and Codex

If you want something better than both of those try Crush which is a standalone go binary by the original developer of OpenCode.

Re: Claude Code's source code has been leaked via a map file in their NPM registry

#677
post #567
post #134

Earlier quoted context omitted.

You'll never win this battle, so why waste feelings and energy on it? That's where the internet is headed. There's no magical human verification technology coming to save us.

Fatalism will also not fix anything. But I suppose death comes for us all, yes? Why do anything at all?

This is the only relevant question. And it leads right to the next one which is “what is a good life?”

But humans have a huge bias for action. I think generally doing less is better.

Re: Claude Code's source code has been leaked via a map file in their NPM registry

#678
post #346

Earlier quoted context omitted.

Magical human verification technology is called "your own private forum" in conjunction with "invite your friends"

Until your friend writes a bot. Funny story, when I was younger I trained a basic text predictor deep learning model on all my conversations in a group chat I was in, it was surprisingly good at sounding like me and sometimes I'd use it to generate some text to submit to the chat.

I don't see what the value of this would be. Why would I want to automate talking to my friends? If I'm not interested in talking with them, I could simply not do it. It also carries the risk of not actually knowing what was talked about or said, which could come up in real life and lead to issues. If a "friend" started using a bot to talk to me, they would not longer be considered a friend. That would be the end.
Post reply on HN