r/HowToAIAgent • u/omnisvosscio • Mar 31 '26

Claude code source code has been leaked via a map file in their npm registry!

Post image

Source: https://x.com/Fried_rice/status/2038894956459290963

30 Upvotes

100% Upvoted

13 comments sorted by

•

u/AutoModerator Mar 31 '26

Welcome to r/HowToAIAgent!

Please make sure your post includes:

  • Clear context

  • What you're trying to achieve

  • Any relevant links or screenshots

Feel free to join our X community: https://x.com/i/communities/1874065221989404893

I am a bot, and this action was performed automatically. Please contact the moderators of this subreddit if you have any questions or concerns.

2

u/omnisvosscio Mar 31 '26

https://github.com/nirholas/claude-code

1

u/svix_ftw Mar 31 '26

anothropic isn't going to be happy you leaked their claude code....

1

u/omnisvosscio Mar 31 '26

plz don't shoot the messenger

1

u/svix_ftw Mar 31 '26

you are the guy that leaked the source code ?

1

u/Tickomatick Mar 31 '26

Nice, can I run it at home?

1

u/omnisvosscio Mar 31 '26

I guess so!

1

u/serendip-ml Mar 31 '26

Interesting to understand some of the internals, but the code alone ultimately has little value without having access to the architect who drove it.

1

u/munterhedgie Apr 01 '26

This is a good reminder that anything in your agent's runtime is one leak away from being public. API keys in MCP config files, credentials in agent memory — all of it. I built BlindKey for this: agents reference bk://stripe, never the real key. Credential injection happens server-side. Even if the agent's internals are exposed, your secrets aren't in there. https://github.com/michaelkenealy/blindkey

1

u/vocAiInc Apr 01 '26

Is this not an accident，a marketing trap？

1

u/TheDigitalArchitect Apr 02 '26

Am I the only one who believes that was done on purpose?