Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Claude Code's source code has been leaked via a map file in their NPM registry

twitter.com

Post reply on HN
Print view View original

951–960 of 1001 posts

Re: Claude Code's source code has been leaked via a map file in their NPM registry

#951

Post by dolmen »

therealpygon wrote: post #881
foob wrote: post #552

Amusingly, they deprecated it with a message of "Unpublished" instead of actually unpublishing it [1]. When you use npm unpublish it removes the package version from the registry, when you use npm deprecate it leaves it there and simply marks the package as deprecated with your message. I have to imagine the point was to make it harder for people to download the source map, so to deprecate it with this message gives…

Commit Message: undo undo unpublish ctrl-z ctrl-c No, stop, don’t commit tha

Esc :q!

Re: Claude Code's source code has been leaked via a map file in their NPM registry

#952

Post by wernsey »

NooneAtAll3 wrote: post #923
avaer wrote: post #224

Earlier quoted context omitted.

Relieved to know I'm not the only one who grepped for that. Thank you for making me feel sane, friend.

is it a reference to something?

SimCity 2000 showed a message "Reticulating splines" when it generated the landscape that didn't mean anything in particular.

It became a bit of a meme in the years since.

Re: Claude Code's source code has been leaked via a map file in their NPM registry

#953

Post by dolmen »

NooneAtAll3 wrote: post #922
mohsen1 wrote: post #231

Earlier quoted context omitted.

here's another gem. src/ink/termio/osc.ts:192–210 void execFileNoThrow('wl-copy', [], opts).then(r => { if (r.code === 0) { linuxCopy = 'wl-copy'; return } void execFileNoThrow('xclip', ...).then(r2 => { if (r2.code === 0) { linuxCopy = 'xclip'; return } void execFileNoThrow('xsel', ...).then(r3 => { linuxCopy = r3.code === 0 ? 'xsel' : null }) }) }) are we doing async or not?

what does that even do?

It looks like a search for the command line tool available to send content to the clipboard.

Can't tell if that obfuscated code works though.

Re: Claude Code's source code has been leaked via a map file in their NPM registry

#954

Post by __alexs »

dgb23 wrote: post #501
__alexs wrote: post #387

Looking forward to someone patching it so that it works with non Anthropic models.

That's already the case I think, you just have to change a bunch of env vars.

No it isn't? Are you an AI?

Re: Claude Code's source code has been leaked via a map file in their NPM registry

#958

Post by lynx97 »

stackghost wrote: post #633
lynx97 wrote: post #630

Earlier quoted context omitted.

Great! Lets do the CAPTCHA-test: Will I, as a 100% blind user, be able to complete your process?

I think so? Can you use a smartphone? edit: can't reply, the rate-limiting is such an awful UX

So, you haven't thought about it yet? Your counterquestion is insufficient to get any further, because "use" is a very relative term. If I can "use" a smartphone depends on the way you code your app. If you use inherently inaccessible UI elements, I can't "use" your app, no matter if I own a smartphone or not.

I might reply with a similarily useless question: Can you write accessible smartphone apps?

Re: Claude Code's source code has been leaked via a map file in their NPM registry

#959

Post by dgb23 »

__alexs wrote: post #954
dgb23 wrote: post #501

Earlier quoted context omitted.

That's already the case I think, you just have to change a bunch of env vars.

No it isn't? Are you an AI?

> No it isn't?

There was a recent post on HN describing how to use local models with claude code by changing some env vars. Also some tools let you run Claude Code with other models conveniently (see: https://docs.ollama.com/integrations/claude-code).

> Are you an AI?

If I were one, I would not admit it!

Re: Claude Code's source code has been leaked via a map file in their NPM registry

#960

Post by lobsterthief »

cedws wrote: post #802
GorbachevyChase wrote: post #664

Earlier quoted context omitted.

I like these guys less every day. The rate limits are so low they are close to not even useful as a provider.

It made me raise my eyebrows when everyone was rushing to jump to Claude because OpenAI agreed to work with the DoW. Both companies are just as shitty as each other and will resort to underhanded tactics to stay on top. Go China to be honest. They're the most committed to open AI research and they have more interesting constraints to work under, like restricted access to NVIDIA hardware.

But then the Chinese government has the ultimate say and, propaganda aside, if they don’t like what your product is you might suddenly lose access to said LLM provider.
Post reply on HN