Live data from Hacker News

Claude Code's source code has been leaked via a map file in their NPM registry

twitter.com

841–850 of 1001 posts

Re: Claude Code's source code has been leaked via a map file in their NPM registry

#841
post #781

I've never understood this convention (common on HN, some news orgs, and elsewhere), that, when there's an IP breach, it's suddenly fair game for everyone else to go through the IP, analyze and comment on it publicly, etc.

It's because Anthropic doesn't care about IP

What I described is standard public behavior, regardless of the company.

Re: Claude Code's source code has been leaked via a map file in their NPM registry

#842
post #760

Obfuscated ts/js code is not machine code to begin with, so not sure what’s the big deal. Also, not sure why anthropic doesn’t just make their cli open source - it’s not like it’s something special (Claude is, this cli thingy isn’t)

> not sure why anthropic doesn’t just make their cli open source They don't want everyone to see how poorly it's implemented and that the whole thing is a big fragile mess riddled with bugs. That's my experience anyway. For instance, just recently their little CLI -> browser oauth login flow was generating malformed URLs and URLs pointing to a localhost port instead of their real website.

Look at the gemini-cli.

Pretty sure it will look like that

Re: Claude Code's source code has been leaked via a map file in their NPM registry

#843

Earlier quoted context omitted.

> But I suppose death comes for us all, yes? Why do anything at all? Wrong take. Death comes for us all, yes, so why hold back? Do you want to live forever?

> Do you want to live forever? Yes, of course. Do you prefer to die? Those are the only two alternatives, and a decision that you don't want one is a decision that you prefer the other.

I can think of no concept more horrifying than personal immortality and if you disagree I don't think you've thought about it enough.

Re: Claude Code's source code has been leaked via a map file in their NPM registry

#844
post #760

Obfuscated ts/js code is not machine code to begin with, so not sure what’s the big deal. Also, not sure why anthropic doesn’t just make their cli open source - it’s not like it’s something special (Claude is, this cli thingy isn’t)

> not sure why anthropic doesn’t just make their cli open source They don't want everyone to see how poorly it's implemented and that the whole thing is a big fragile mess riddled with bugs. That's my experience anyway. For instance, just recently their little CLI -> browser oauth login flow was generating malformed URLs and URLs pointing to a localhost port instead of their real website.

I really don't think they care that much, but it's a tight race and gives them a slight edge over other labs building harnesses, since they are in the lead.

Re: Claude Code's source code has been leaked via a map file in their NPM registry

#845

Earlier quoted context omitted.

So, think of it as a business man: You don't really care if your customers swear or whatever, but you know that it'll generate bad headlines. So you gotta do something. Just like a door lock isn't designed for a master criminal, you don't need to design your filter for some master swearer; no, you design it good enough that it gives the impression that further tries are futile. So yeah, you do what's less intesive to…

Yea.. but.. in English only. Fortunately I can swear pretty well in Spanish.

That's like saying you can use a chisel for woodworking.

Re: Claude Code's source code has been leaked via a map file in their NPM registry

#846
post #134

Earlier quoted context omitted.

You'll never win this battle, so why waste feelings and energy on it? That's where the internet is headed. There's no magical human verification technology coming to save us.

I guess I could just curl up into fetal position and watch the world go by. But that's no fun. Why not dream big and shoot for the moon with kooky goals like, say, having an underground, community-supported internet where things are falling less to shit? Belief in inevitability is a choice (except for maybe dying, I guess).

Why stop at one? Make more such underground community supported internets. The more the merrier. Monoculture ends with death. The only question is how long it will take.

Re: Claude Code's source code has been leaked via a map file in their NPM registry

#849

Earlier quoted context omitted.

> But I suppose death comes for us all, yes? Why do anything at all? Wrong take. Death comes for us all, yes, so why hold back? Do you want to live forever?

> Do you want to live forever? Yes, of course. Do you prefer to die? Those are the only two alternatives, and a decision that you don't want one is a decision that you prefer the other.

No, there is no alternative. Everything eventually dies, so you better make peace with it. The only people who believe that they won't die are religious people who believe in an afterlife (which is a preposterous position) and the people who have their heads or whole bodies frozen because they think they are so special that the future will honor their contracts and revive them.

Both of these are bound to lead to the exact same outcome so it doesn't really matter what you believe but it may guide you to wiser decision while you are alive to accept reality absent proof to the contrary.

Re: Claude Code's source code has been leaked via a map file in their NPM registry

#850

Earlier quoted context omitted.

All these companies use AIs for writing these prompts. But AI aren't actually very good at writing prompts imo. Like they are superficially good in that they seem to produce lots of vaguely accurate and specific text. And you would hope the specificity would mean it's good. But they sort of don't capture intent very well. Nor do they seem to understand the failure modes of AI. The "-- describe only what the code chan…

Hey LLM, write me a system prompt that will avoid the common AI 'tells' or other idiosyncrasies that make it obvious that text or code output was generated by an AI/LLM. Use the referenced Wikipedia article as a must-avoid list, but do not consider it exhaustive. Add any derivations or modifications to these rules to catch 'likely' signals as well. There, sorted!

Hey, LLM, take a look at these multiple hundred emails and docs in my docs folder from the last few years, before I started using AI, that I wrote personally. create a list of all of the idiosyncrasies that I have in my writing. Create a file to remember that. And then use that to write any new text that'll be published so it sounds like my authentic voice. Thank you.
Post reply on HN