Live data from Hacker News

Claude Code's source code has been leaked via a map file in their NPM registry

twitter.com

691–700 of 1001 posts

Re: Claude Code's source code has been leaked via a map file in their NPM registry

#691
post #7

The big loss for Anthropic here is how it reveals their product roadmap via feature flags. A big one is their unreleased "assistant mode" with code name kairos. Just point your agent at this codebase and ask it to find things and you'll find a whole treasure trove of info. Edit: some other interesting unreleased/hidden features - The Buddy System: Tamagotchi-style companion creature system with ASCII art sprites - Un…

Is there an AGI mode FF? Asking for a friend…

Re: Claude Code's source code has been leaked via a map file in their NPM registry

#692
post #655

Undercover mode also pretends to be human, which I'm less ok with: https://github.com/chatgptprojects/claude-code/blob/642c7f94...

Also unintentionally reveals something: > Write commit messages as a human developer would — describe only what the code change does. That's not what a commit message is for, that's what the diff is for. The commit message should explain WHY. Sadly not doing that likely does indeed make it appear more human...

Yeah, that was my reaction too. A shame they try to hide themselves, but even worse, the instructions to this "Fake Human" is wrong too!

Re: Claude Code's source code has been leaked via a map file in their NPM registry

#693
post #134

Earlier quoted context omitted.

You'll never win this battle, so why waste feelings and energy on it? That's where the internet is headed. There's no magical human verification technology coming to save us.

I am actively building non-magical human verification technology that doesn't require you uploading your retinal scans or ID to billionaires or incompetent outsourcing firms.

We already have it and we use it to validate the trusted human maintainer involvement behind the linux packages that power the entire internet: PGP Web Of Trust. Still works as designed and I still go to keysigning parties in person.

Re: Claude Code's source code has been leaked via a map file in their NPM registry

#695
post #134

Earlier quoted context omitted.

You'll never win this battle, so why waste feelings and energy on it? That's where the internet is headed. There's no magical human verification technology coming to save us.

IDK. I sort of like the idea that now instead of dead internet theory being a joke, that it’ll be a well known fact that a minority of people are not real and there is no point in engaging… I look forward to Social 3… where people have to meet face to face.

How quickly would that meat-space renaissance spin through our whole cyberpunk heritage, speedrunning the same authentication challenges..?

The cornucopia of gargoyles, living their best life as terminals for the machine.

The strange p-zombies who don't show their gargoyle accessories visibly, but somehow still follow the script.

Eventually the more insidious infiltrators, requiring a real Voight-Kampff test.

Re: Claude Code's source code has been leaked via a map file in their NPM registry

#696

Really surprising how many people are downplaying this leak! "Google and OpenAi have already open sourced their Agents, so this leak isn't that relevant " What Google and OpenAi have open sourced is their Agents SDK, a toolkit, not the secret sauce of how their flagship agents are wired under the hood! expect the takedown hammer on the tweet, the R2 link, and any public repos soon

It doesn't matter that much. Trust me you could just have an LLM reverse engineer the obfuscated code.

The point is that a "secure coding platform" leaked something they were trying to keep under wraps, whether the contents of the leak matter or not.

Also, as many others have pointed out, there is roadmap info in here that wouldn't be available in the production build.

Re: Claude Code's source code has been leaked via a map file in their NPM registry

#697

Earlier quoted context omitted.

I wish. Claude Code is clearly a pile of vibe-coded garbage. The UI is janky and jumps all over the place, especially during longer sessions. (Which also have a several second delay to render. In a terminal). Lately, it's been crashing if I hold the Backspace key down for too long. Being open-source would be the best thing to happen to them. At least they would finally get a pair of human eyes looking at their codeba…

> Claude Code is clearly a pile of vibe-coded garbage. The UI is janky and jumps all over the place, especially during longer sessions. (Which also have a several second delay to render. In a terminal). Don't you know, they're proud of their text interface that is structured more like a video game. https://spader.zone/engine/

Not to stand up for Claude Code in any way, I don’t like the company or use the product. This is just a related tangent-

one of my favorite software projects, Arcan, is built on the idea that there’s a lot of similarities between Game Engines, Desktop Environments, Web Browsers, and Multimedia Players. https://speakerdeck.com/letoram/arcan?slide=2

They have a really cool TUI setup that is kinda in a real sense made with a small game engine :)

https://arcan-fe.com/2022/04/02/the-day-of-a-new-command-lin...

Re: Claude Code's source code has been leaked via a map file in their NPM registry

#698
post #661
post #584

Earlier quoted context omitted.

>there is no point in code-reviewing ai-generated code the idea that you should just blindly trust code you are responsible for without bothering to review it is ludicrous.

(I mostly agree with you, but) devils advocate: most people already do that with dependencies, so why not move the line even further up?

Because you trust that your dependencies are not vibe coded and have been reviewed by humans.

Re: Claude Code's source code has been leaked via a map file in their NPM registry

#699
post #567
post #134

Earlier quoted context omitted.

You'll never win this battle, so why waste feelings and energy on it? That's where the internet is headed. There's no magical human verification technology coming to save us.

Fatalism will also not fix anything. But I suppose death comes for us all, yes? Why do anything at all?

I feel that fatalism, especially when people treat it as some sort of personal philosophy, is kind of lazy.

It requires no effort to say "fuck this, nothing matters anyway", and then justify doing literally nothing.

Re: Claude Code's source code has been leaked via a map file in their NPM registry

#700

It's a little bit shocking that this zipfile is still available hours later. Could anyone in legal chime in on the legality of now 're-implementing' this type of system inside other products? Or even just having an AI look at the architecture and implement something else? It would seem given the source code that AI could clone something like this incredibly fast, and not waste it's time using ts as well. Any Legal GC…

AI works are not copyrightable so...
Post reply on HN