Live data from Hacker News

Claude Code's source code has been leaked via a map file in their NPM registry

twitter.com

501–510 of 1001 posts

Re: Claude Code's source code has been leaked via a map file in their NPM registry

#502
post #212

Earlier quoted context omitted.

Yes, if it was made for human comprehension or maintenance. If it's entirely generated / consumed / edited by an LLM, arguably the most important metric is... test coverage, and that's it ?

Ye I honestly don't understand his comment. Is it bad code writing? Pre 2026? Sure. In 2026. Nope. Is it going to be a headache for some poor person on oncall? Yes. But then again are you "supposed" to go through every single line in 2026? Again no. I hate it. But the world is changing and till the bubble pops this is the new norm

Sorry, I was not clear enough.

My first word was litteraly "Yes", so I agree that a function like this is a maintenance nightmare for a human. And, sure, the code might not be "optimized" for the LLM, or token efficiency.

However, to try and make my point clearer: it's been reported that anthropic has "some developpers won't don't write code" [1].

I have no inside knowledge, but it's possible, by extension, to assume that some parts of their own codebase are "maintained" mostly by LLMs themselves.

If you push this extension, then, the code that is generated only has to be "readable" to:

* the next LLM that'll have to touch it

* the compiler / interpreter that is going to compile / run it.

In a sense (and I know this is a stretch, and I don't want to overdo the analogy), are we, here, judging a program quality by reading something more akin to "the x86 asm outputed by the compiler", rather than the "source code" - which in this case, is "english prompts", hidden somewhere in the claude code session of a developper ?

Just speculating, obviously. My org is still very much more cautious, and mandating people to have the same standard for code generated by LLM as for code generated by human ; and I agree with that.

I would _not_ want to debug the function described by the commentor.

So I'm still very much on the "claude as a very fast text editor" side, but is it unreasonnable to assume that anthropic might be further on the "claude as a compiler for english" side ?

[1] https://www.reddit.com/r/ArtificialInteligence/comments/1s7j...

Re: Claude Code's source code has been leaked via a map file in their NPM registry

#503

Was searching for the rumored Mythos/Capybara release, and what even is this file? https://github.com/chatgptprojects/claude-code/blob/642c7f94...

turns out its for an April fools tomorrow: https://x.com/mesmerlord/status/2038938888178135223

They even leaked their April Fool’s fun. Brutal!

Re: Claude Code's source code has been leaked via a map file in their NPM registry

#504
post #148

Earlier quoted context omitted.

Malus is not a real project btw, it's a parody: “Let's end open source together with this one simple trick” https://pretalx.fosdem.org/fosdem-2026/talk/SUVS7G/feedback/ Malus is translating code into text, and from text back into code. It gives the illusion of clean room implementation that some companies abuse. The irony is that ChatGPT/Claude answers are all actually directly derived from open-source code, so...

It's not a parody when they accept money and deliver the service.

Dumb Starbucks begs to differ.

https://en.wikipedia.org/wiki/Dumb_Starbucks

Re: Claude Code's source code has been leaked via a map file in their NPM registry

#505
post #22

Earlier quoted context omitted.

You'd be playing cat and mouse like yt-dlp, but there's probably more value to this code than just a temporary way to milk claude subscriptions.

If you're using a claude subscription you'd just use claude code. The real value here will be in using other cheap models with the cc harness.

I have no interest in Claude Code as a harness, only their models. I'm used to OpenCode at this point and don't want to switch to a proprietary harness.

Re: Claude Code's source code has been leaked via a map file in their NPM registry

#506

Isn't it open source? Or is there an open source front-end and a closed backend?

> Isn't it open source? No, its not even source available,. > Or is there an open source front-end and a closed backend? No, its all proprietary. None of it is open source.

> its not even source available

It _wasn't_ even source available.

Re: Claude Code's source code has been leaked via a map file in their NPM registry

#507

Maybe the OP could clarify, I don't like reading leaked code, but I'm curious: my understanding is that is it the source code for "claude code", the coding assistant that remotely calls the LLMs. Is that correct ? The weights of the LLMs are _not_ in this repo, right ? It sure sucks for anthropic to get pawned like this, but it should not affect their bottom line much ?

> I don't like reading leaked code Don't worry about that, the code in that repository isn't Anthropic's to begin with.

You believe it's just a fake ? (That would be ironic if the fake was generated by... claude itself. Anyway.)

Re: Claude Code's source code has been leaked via a map file in their NPM registry

#508
post #349
post #84

They have an interesting regex for detecting negative sentiment in users prompt which is then logged (explicit content): https://github.com/chatgptprojects/claude-code/blob/642c7f94... I guess these words are to be avoided...

I'm clearly way too polite to Claude. Also: // Match "continue" only if it's the entire prompt if (lowerInput === 'continue') { return true } When it runs into an error, I sometimes tell it "Continue", but sometimes I give it some extra information. Or I put a period behind it. That clearly doesn't give the same behaviour.

The only time that function is used in the code is to log it.

    logEvent('tengu_input_prompt', { isNegative, isKeepGoing })

Re: Claude Code's source code has been leaked via a map file in their NPM registry

#510
post #134

Undercover mode also pretends to be human, which I'm less ok with: https://github.com/chatgptprojects/claude-code/blob/642c7f94...

You'll never win this battle, so why waste feelings and energy on it? That's where the internet is headed. There's no magical human verification technology coming to save us.

I assume we're heading to a place where keyboards will all have biometric sensors on every key and measure weight fluctuations in keystrokes, actually.
Post reply on HN