Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Claude Code's source code has been leaked via a map file in their NPM registry

twitter.com

Post reply on HN
Print view View original

401–410 of 1001 posts

Re: Claude Code's source code has been leaked via a map file in their NPM registry

#401

Post by LelouBil »

bilekas wrote: post #378
arrsingh wrote: post #370

I don't understand why claude code (and all CLI apps) isn't written in Rust. I started building CLI agents in Go and then moved to Typescript and finally settled on Rust and it was amazing! I even made it into an open source runtime - https://agent-air.ai . Maybe I'm just a backend engineer so Rust appeals to me. What am I missing?

Think about your question, depending on the tool, Rust might not be needed, is high level memory performance and safety needed in a coding agent ? Probably not. It's high speed iteration of release ? Might be needed, Interpreted or JIT compiled ? might be needed. Without knowing all the requirements its just your workspace preference making your decision and not objectively the right tool for the job.

While not directly related to GP, I would guess that a codebase developped with a coding agent (I assume Claude code is used to work on itself) would benefit from a stricter type system (one important point of Rust)

Re: Claude Code's source code has been leaked via a map file in their NPM registry

#402

Post by jcelmeta14 »

mutkach wrote: post #337

/* * Check if 1M context is disabled via environment variable. * Used by C4E admins to disable 1M context for HIPAA compliance. */ export function is1mContextDisabled(): boolean { return isEnvTruthy(process.env.CLAUDE_CODE_DISABLE_1M_CONTEXT) } Interesting, how is that relevant to HIPAA compliance?

[dead]

Re: Claude Code's source code has been leaked via a map file in their NPM registry

#404

Post by shimman »

krlx wrote: post #109
panny wrote: post #95

Earlier quoted context omitted.

They can't. AI generated code cannot be copyrighted. They've stated that claude code is built with claude code. You can take this and start your own claude code project now if you like. There's zero copyright protection on this.

Given that from 2026 onwards most of the code is going to be computer generated, doesn't it open some interesting implications there ?

It's undetermined if code will be majority written by machines, especially as people start to realize how harmful these tools are without extreme diligence. Outages at Cloudflare, AWS, GitHub, etc are just the beginning. Companies aren't going to want to use tools that can potentially cause $100s of millions in potential damages (see Amazon store being down causing massive revenue loss).

Re: Claude Code's source code has been leaked via a map file in their NPM registry

#405

Post by feketegy »

BoppreH wrote: post #103
bkryza wrote: post #84

They have an interesting regex for detecting negative sentiment in users prompt which is then logged (explicit content): https://github.com/chatgptprojects/claude-code/blob/642c7f94... I guess these words are to be avoided...

An LLM company using regexes for sentiment analysis? That's like a truck company using horses to transport parts. Weird choice.

It's all regex anyways

Re: Claude Code's source code has been leaked via a map file in their NPM registry

#408

Post by virtualritz »

bilekas wrote: post #378
arrsingh wrote: post #370

I don't understand why claude code (and all CLI apps) isn't written in Rust. I started building CLI agents in Go and then moved to Typescript and finally settled on Rust and it was amazing! I even made it into an open source runtime - https://agent-air.ai . Maybe I'm just a backend engineer so Rust appeals to me. What am I missing?

Think about your question, depending on the tool, Rust might not be needed, is high level memory performance and safety needed in a coding agent ? Probably not. It's high speed iteration of release ? Might be needed, Interpreted or JIT compiled ? might be needed. Without knowing all the requirements its just your workspace preference making your decision and not objectively the right tool for the job.

I have a 16GB RAM laptop. It's a beast I bought in 2022.

It's all I need for my work.

RAM on this machine can't be upgraded. No issue when running a few Codex instances.

Claude: forget it.

That's why something like Rust makes a lot of sense.

Even more now, as RAM prices are becoming a concern.

Re: Claude Code's source code has been leaked via a map file in their NPM registry

#409

Post by LelouBil »

rvnx wrote: post #148
avaer wrote: post #19

Would be interesting to run this through Malus [1] or literally just Claude Code and get open source Claude Code out of it. I jest, but in a world where these models have been trained on gigatons of open source I don't even see the moral problem. IANAL, don't actually do this. https://malus.sh/

Malus is not a real project btw, it's a parody: “Let's end open source together with this one simple trick” https://pretalx.fosdem.org/fosdem-2026/talk/SUVS7G/feedback/ Malus is translating code into text, and from text back into code. It gives the illusion of clean room implementation that some companies abuse. The irony is that ChatGPT/Claude answers are all actually directly derived from open-source code, so...

First time I hear about this, it's interesting to have written all of this out.

Now this makes me think of game decompilation projects, which would seem to fall in the same legal area as code that would be generated by something like Malus.

Different code, same end result (binary or api).

We definitely need to know what the legal limits are and should be

Post reply on HN