Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Claude Code's source code has been leaked via a map file in their NPM registry

twitter.com

Post reply on HN
Print view View original

681–690 of 1001 posts

Re: Claude Code's source code has been leaked via a map file in their NPM registry

#681

Post by kolkov »

dralley wrote: post #644
kolkov wrote: post #625

Earlier quoted context omitted.

"Why would you ship tests?" — Fair point. Source maps only include production bundle files — tests wouldn't appear in the map regardless. Tests may well exist in Anthropic's internal repo, and we can't claim otherwise. However, the bugs we found speak for themselves: a watchdog that doesn't protect the most vulnerable code path for 5+ months, a fallback with telemetry that never executes where it's needed, Promise.ra…

You're not beating the "written by an LLM" allegations.

I write it myself, the agent only translates it into English.

Re: Claude Code's source code has been leaked via a map file in their NPM registry

#682

Post by [deleted] »

treexs wrote: post #7

The big loss for Anthropic here is how it reveals their product roadmap via feature flags. A big one is their unreleased "assistant mode" with code name kairos. Just point your agent at this codebase and ask it to find things and you'll find a whole treasure trove of info. Edit: some other interesting unreleased/hidden features - The Buddy System: Tamagotchi-style companion creature system with ASCII art sprites - Un…

[deleted]

Re: Claude Code's source code has been leaked via a map file in their NPM registry

#683

Post by blobbers »

It's a little bit shocking that this zipfile is still available hours later.

Could anyone in legal chime in on the legality of now 're-implementing' this type of system inside other products? Or even just having an AI look at the architecture and implement something else?

It would seem given the source code that AI could clone something like this incredibly fast, and not waste it's time using ts as well.

Any Legal GC type folks want to chime in on the legality of examining something like this? Or is it liked tainted goods you don't want to go near?

Re: Claude Code's source code has been leaked via a map file in their NPM registry

#684

Post by lrvick »

0x3f wrote: post #134
BoppreH wrote: post #113

Undercover mode also pretends to be human, which I'm less ok with: https://github.com/chatgptprojects/claude-code/blob/642c7f94...

You'll never win this battle, so why waste feelings and energy on it? That's where the internet is headed. There's no magical human verification technology coming to save us.

I can prove all contributions to stagex are by humans because we all belong to a 25 year old web of trust with 5444 endorser keys including most redhat, debian, ubuntu, and fedora maintainers, with all of our own maintainer keys in smartcards we tap to sign every review and commit, and we do background checks on every new maintainer.

I am completely serious. We have always had a working proof of human system called Web of Trust and while everyone loves to hate on PGP (in spite of it using modern ECC crypto these days) it is the only widely deployed spec that solves this problem.

https://kron.fi/en/posts/stagex-web-of-trust/

Re: Claude Code's source code has been leaked via a map file in their NPM registry

#686

Post by erisnet »

BoppreH wrote: post #113

Undercover mode also pretends to be human, which I'm less ok with: https://github.com/chatgptprojects/claude-code/blob/642c7f94...

The first two zips I download today were 9.887.340 bytes, why is yours 10.222.630 bytes?

Re: Claude Code's source code has been leaked via a map file in their NPM registry

#687

Post by epolanski »

mohsen1 wrote: post #102

src/cli/print.ts This is the single worst function in the codebase by every metric: - 3,167 lines long (the file itself is 5,594 lines) - 12 levels of nesting at its deepest - ~486 branch points of cyclomatic complexity - 12 parameters + an options object with 16 sub-properties - Defines 21 inner functions and closures - Handles: agent run loop, SIGINT, rate-limits, AWS auth, MCP lifecycle, plugin install/refresh, wo…

Hmmm it's likely they have found that it works better for LLMs that need to operate on it.

Re: Claude Code's source code has been leaked via a map file in their NPM registry

#688

Post by snackbroken »

arcanemachiner wrote: post #609
lanbin wrote: post #571

Earlier quoted context omitted.

Open Claude Code? Better than OpenCode and Codex

I wish. Claude Code is clearly a pile of vibe-coded garbage. The UI is janky and jumps all over the place, especially during longer sessions. (Which also have a several second delay to render. In a terminal). Lately, it's been crashing if I hold the Backspace key down for too long. Being open-source would be the best thing to happen to them. At least they would finally get a pair of human eyes looking at their codeba…

> Lately, it's been crashing if I hold the Backspace key down for too long.

Golden opportunity to re-enact xkcd 1172.

Re: Claude Code's source code has been leaked via a map file in their NPM registry

#689

Post by satvikpendem »

al_borland wrote: post #678
satvikpendem wrote: post #365

Earlier quoted context omitted.

Until your friend writes a bot. Funny story, when I was younger I trained a basic text predictor deep learning model on all my conversations in a group chat I was in, it was surprisingly good at sounding like me and sometimes I'd use it to generate some text to submit to the chat.

I don't see what the value of this would be. Why would I want to automate talking to my friends? If I'm not interested in talking with them, I could simply not do it. It also carries the risk of not actually knowing what was talked about or said, which could come up in real life and lead to issues. If a "friend" started using a bot to talk to me, they would not longer be considered a friend. That would be the end.

It was for fun, to see if it were possible and whether others could detect they were talking to a bot or not, you know, the hacker ethos and all. It's not meant to be taken seriously although looks like these days people unironically have LLM "friends."

Re: Claude Code's source code has been leaked via a map file in their NPM registry

#690

Post by nostrademons »

johnfn wrote: post #490
kolkov wrote: post #351

[flagged]

This is written by an LLM. Also, it doesn't make sense: > 57K lines, 0 tests, vibe coding in production Why on earth would you ship your tests?

It's just Claude bragging about being the first AI whistleblower.
Post reply on HN