I've never understood this convention (common on HN, some news orgs, and elsewhere), that, when there's an IP breach, it's suddenly fair game for everyone else to go through the IP, analyze and comment on it publicly, etc.
Claude Code's source code has been leaked via a map file in their NPM registry
781–790 of 1001 posts
Re: Claude Code's source code has been leaked via a map file in their NPM registry
#782I think this is ultimately caused by a Bun bug which I reported, which means source maps are exposed in production: https://github.com/oven-sh/bun/issues/28001 Claude code uses (and Anthropic owns) Bun, so my guess is they're doing a production build, expecting it not to output source maps, but it is.
My apologies, this isn't the cause. Bun build doesn't suffer from this bug.
hn should allow append-only edits, but appreciate the correction
Re: Claude Code's source code has been leaked via a map file in their NPM registry
#783Earlier quoted context omitted.
Haven’t looked at the code, but is the server providing the client with a system prompt that it can use, which would contain fake tool definitions when this is enabled? What enables it? And why is the client still functional when it’s giving the server back a system prompt with fake tool definitions? Is the LLM trained to ignore those definitions? Wonder if they’re also poisoning Sonnet or Opus directly generating si…
Not sure, and not completely convinced of the explanation, but the way this sticks out so obviously makes it look like a honeypot to me.
Great theory. I'll dig deeper.
Re: Claude Code's source code has been leaked via a map file in their NPM registry
#784Earlier quoted context omitted.
Fatalism will also not fix anything. But I suppose death comes for us all, yes? Why do anything at all?
I feel that fatalism, especially when people treat it as some sort of personal philosophy, is kind of lazy. It requires no effort to say "fuck this, nothing matters anyway", and then justify doing literally nothing.
It also makes no sense! "Fuck this, it doesn't matter - but I'll happily spend effort communicating that to others, because apparently making others not care about something I don't care about is something I do care about." Wut?!
Well, I say it makes no sense. Alternatively, it makes a lot of sense, and these people actually just wanna destroy everything we hold dear :-(
Re: Claude Code's source code has been leaked via a map file in their NPM registry
#785Earlier quoted context omitted.
This is the only relevant question. And it leads right to the next one which is “what is a good life?” But humans have a huge bias for action. I think generally doing less is better.
> I think generally doing less is better. My sedentary lifestyle is responsible for my recurrent cellulitis infections. Just saying.
I got hit by a car while out for a run. Just saying.
Re: Claude Code's source code has been leaked via a map file in their NPM registry
#786Earlier quoted context omitted.
It's how people resisted CGI back in the day. What people dislike is low quality. There is a loud subset who are really against it on principle like we also have people who insist on analog music but regular people are much more practical but they don't post about this all day on the internet.
perhaps one important detail is that cassette tape guys and Lucasfilm aren’t/weren’t demanding a complete and total restructuring of the economy and society
An excellent observation. When films became digital the real backlash came when they stopped distributing film for the old film projectors and every movie theaters had to invest in a very expensive DCP projectors. Some couldn’t and were forced to shut down.
If I had lost my local movie theater because of digital film, I would have a really good reason to hate the technology, even though the blame is on the studios forcing that technology on everyone.
Re: Claude Code's source code has been leaked via a map file in their NPM registry
#787Undercover mode also pretends to be human, which I'm less ok with: https://github.com/chatgptprojects/claude-code/blob/642c7f94...
You'll never win this battle, so why waste feelings and energy on it? That's where the internet is headed. There's no magical human verification technology coming to save us.
It’s certainly winnable with some legislative tweaks. These systems are all designed by humans, we can just change them.
Of course, we’d need a significant change of direction in leadership, but it’s happened many times before. French Revolution seems highly relevant
Re: Claude Code's source code has been leaked via a map file in their NPM registry
#788Undercover mode also pretends to be human, which I'm less ok with: https://github.com/chatgptprojects/claude-code/blob/642c7f94...
You'll never win this battle, so why waste feelings and energy on it? That's where the internet is headed. There's no magical human verification technology coming to save us.
I guess I could just curl up into fetal position and watch the world go by. But that's no fun. Why not dream big and shoot for the moon with kooky goals like, say, having an underground, community-supported internet where things are falling less to shit?
Belief in inevitability is a choice (except for maybe dying, I guess).
Re: Claude Code's source code has been leaked via a map file in their NPM registry
#789I think this is ultimately caused by a Bun bug which I reported, which means source maps are exposed in production: https://github.com/oven-sh/bun/issues/28001 Claude code uses (and Anthropic owns) Bun, so my guess is they're doing a production build, expecting it not to output source maps, but it is.
[deleted]
Re: Claude Code's source code has been leaked via a map file in their NPM registry
#790That idea list is super cute. I like the tamagochi idea. Somehow the candidness of that file makes it seem like anthropic would be an easy place to work at.