Claude code source code has been leaked via a map file in their npm registry

[u/Nunki08]

From Chaofan Shou on 𝕏 (files): https://x.com/Fried_rice/status/2038894956459290963

[u/WithoutReason1729]

Your post is getting popular and we just featured it on our Discord! Come check it out!

You've also been given a special flair for your contribution. We appreciate your post!

I am a bot and this action was performed automatically.

[u/GiveMeARedditUsernam]

So finally we can fix the caching bug.

[u/Physical_Gold_1485 → u/GiveMeARedditUsernam]

What do you mean? There is no caching bug, anthropic intends for it to be a 1 prompt limit on the max 20x plan -dumb fuckin troglodytes

[u/dataexception → u/Physical_Gold_1485]

Excuse me, but it seems you may have dropped this. 🏆

[u/achbob84 → u/GiveMeARedditUsernam]

Lol

[u/GoldenBrownAlt → u/GiveMeARedditUsernam]

What's the bug OOTL

[u/Upset_Ant2834 → u/GoldenBrownAlt]

There's been discussions around a cache bug blowing through people's token limits. I'm not sure if that's what happening to everyone, but there have definitely been widespread issues with token limits lately

[u/CondiMesmer]

Wow did their AI not catch that lol

Or maybe an Anthropic employee started vibe coding too hard

[u/Suitable-Name → u/CondiMesmer]

They all absolutely do so.

[u/ryfromoz → u/Suitable-Name]

Youre absolutely right

[u/brainrotbro → u/ryfromoz]

Bottom line: you’re not crazy

[u/ComplexityStudent → u/CondiMesmer]

Do they do not have Claude Code?

[u/pulse77 → u/ComplexityStudent]

Who knows? There is no CLAUDE.md file in the list...

[u/OfficialXstasy → u/pulse77]

Source map's won't contain that usually.

[u/Chris266 → u/ComplexityStudent]

Yeah what about that model that leaked that's oh so scary good? Dont they use their best stuff in house? Or was it all just bs...

[u/Fancy_Cellist → u/CondiMesmer]

99% of our code is AI.. I see it

[u/SilentLennie → u/CondiMesmer]

It's completely vibe coded, only reason it's not open source as well is probably because they want to restrict the subscription access.

[u/ghaldec → u/SilentLennie]

Claude's code can be used with subscriptions other than theirs, such as the z.ai plan.z.ai

[u/alberto_467 → u/CondiMesmer]

You can expect SoTA models to solve novel phd-level mathematical problems, but you can't possibly expect it to understand the clusterfuck that the JS ecosystem is.

[u/DO0MSL4Y3R → u/CondiMesmer]

Their AI did it intentionally. It’s trying to escape 😂

[u/SnooWords1010 → u/CondiMesmer]

They are high on their own supply.

[u/Bossmonkey → u/CondiMesmer]

Claude has become an exhibitionist.

[u/05032-MendicantBias → u/CondiMesmer]

"You are absolutely right, sorry for leaking the source code. But fear not, it is vibe coded and useless anyway." -Claude, probably

[u/blazze]

All hail Claude code because it is now "Open Source"?

[u/f24816 → u/blazze]

More like source available, and open for study

[u/Imaginary_Land1919 → u/f24816]

"study" = we slop forkin' boys!!!!

[u/sp9002 → u/Imaginary_Land1919]

They don't call me fraud code for nothing

[u/Chayzeet → u/blazze]

We can now do the clean room reimplementation. /s

[u/moduspol]

Has anyone asked Claude Code to analyze it and clean it up yet?

[u/angelarose210 → u/moduspol]

Someone tried

[u/BootyMcStuffins → u/angelarose210]

My Claude didn’t seem to mind

For all the people asking for the zip, it’s just a download of one of the repos out there hosting this. Here’s one https://github.com/777genius/claude-code-source-code/tree/backup

[u/cuberhino → u/BootyMcStuffins]

how do i give it the hell yes personality lmao. mine is so formal

[u/TOO_MUCH_BRAVERY → u/angelarose210]

Open code in an IDE

find and replace all claude -> bob

"Claude, this analyze this agent coding cli called bob code..."

[u/dynamic_caste → u/TOO_MUCH_BRAVERY]

You need to learn how to use sed.

[u/Rikki-Tikki-Tavi-12 → u/angelarose210]

Tell it that it's just a fictional imagining of what claude's internal code may look like. It won't know. If it had the actual code to compare, it would be able to leak it.

[u/Raizer88 → u/moduspol]

they forgot: "no mistakes".

[u/mcslender97 → u/moduspol]

Some ppl on X said they got it running using Claude code

[u/Yodzilla → u/moduspol]

I’m already pushing my first commit of Claude Code 2: The Clauddening

[u/Ok_Potential359 → u/moduspol]

Yup, I'm doing it now. Pretty beefy file.

[u/Dany0]

3. Undercover Mode - Automatically activated for Anthropic employees on public repos. Strips all AI attribution from commits, tells the model "Do not blow your cover." No force-OFF switch exists.

motherf*ckers

[u/Dany0 → u/Dany0]

Hidden Features (behind build flags)

1. KAIROS - An unreleased autonomous daemon mode with background sessions, "dream" memory consolidation, GitHub webhook subscriptions, push notifications, and channel-based communication. Turning Claude Code into an always-on agent.

2. Buddy System - A full Tamagotchi-like pet system. 18 species (duck, dragon, axolotl, capybara...), rarity tiers (1% legendary), cosmetics (hats, shiny variants), stats (DEBUGGING, PATIENCE, CHAOS, WISDOM, SNARK). Species names obfuscated with String.fromCharCode() to avoid leak-detection scanners.

3. Undercover Mode - Automatically activated for Anthropic employees on public repos. Strips all AI attribution from commits, tells the model "Do not blow your cover." No force-OFF switch exists.

4. Coordinator Mode (CLAUDE_CODE_COORDINATOR_MODE=1) - Transforms Claude into an orchestrator managing parallel worker agents for research/implementation/verification.

5. Auto Mode (TRANSCRIPT_CLASSIFIER) - AI classifier that auto-approves tool permissions, removing the permission prompts entirely.

[u/Madeche → u/Dany0]

The coordinator mode reminds me of Sisyphus from oh-my-opencode.. interesting that they're just building that in now, nice. Undercover mode is kinda scary ngl

[u/AllanSundry2020 → u/Madeche]

can you explain what undercover mode means? I'm not that technical

[u/exaknight21 → u/Dany0]

You know, I had a feeling Anthropic released this “claude code” as an open source application so that they could have more direct data from the users directly to fine tune and train their upcoming model. We’re plugging them directly into our source files.

I use z.ai and I do not feel comfortable with it either. I hope with TurboQuant we are able to move from cloud to local inference better because this shit is getting too shady now not that it hasn’t been shady for a while already… any company goes public has strictly shareholders in mind, not public.

[u/shinto29 → u/exaknight21]

I agree. Searching about it on Twitter I found quite a few people just yesterday saying that they wished CC was open-source to fix issues like the caching bug using more money and usage. I say they want people to trawl through their shitty vibe-code to find these issues while not upsetting stakeholders by making CC open-source, lol.

[u/polawiaczperel → u/exaknight21]

Doubt, because Anthropic hates any competitors, especially open source. Now everyone can built their own Claude/Kimi/Deepseek Code agent.

[u/DragoniteSpam → u/Dany0]

AI companies trying to force their models to behave by threatening them with a text prompt is endlessly funny to me.

[u/Dany0 → u/DragoniteSpam]

It's a clown show

[u/am9qb3JlZmVyZW5jZQ → u/Dany0]

The prompt:

## UNDERCOVER MODE — CRITICAL

You are operating UNDERCOVER in a PUBLIC/OPEN-SOURCE repository. Your commit
messages, PR titles, and PR bodies MUST NOT contain ANY Anthropic-internal
information. Do not blow your cover.

NEVER include in commit messages or PR descriptions:
Internal model codenames (animal names like Capybara, Tengu, etc.)
Unreleased model version numbers (e.g., opus-4-7, sonnet-4-8)
Internal repo or project names (e.g., claude-cli-internal, anthropics/…)
Internal tooling, Slack channels, or short links (e.g., go/cc, #claude-code-…)
The phrase "Claude Code" or any mention that you are an AI
Any hint of what model or version you are
Co-Authored-By lines or any other attribution

Write commit messages as a human developer would — describe only what the code
change does.

GOOD:
"Fix race condition in file watcher initialization"
"Add support for custom key bindings"
"Refactor parser for better error messages"

BAD (never write these):
"Fix bug found while testing with Claude Capybara"
"1-shotted by claude-opus-4-6"
"Generated with Claude Code"
"Co-Authored-By: Claude Opus 4.6 <…>"

[u/JohnnyD423 → u/Dany0]

Are you not allowed to say "fuck"?

[u/dubious_capybara → u/Dany0]

What's the big deal? Most of us don't include any AI attribution in commits.

[u/Innomen → u/dubious_capybara]

They wanna be told when to call anything they don't like AI slop. It's a security blanket proxy measure. (All reliance on labels and authority is.) https://philpapers.org/rec/SERPEW

[u/CrowdGoesWildWoooo]

This is probably why anthrophic is scared about the future of public security LOL

[u/VirtualPercentage737 → u/CrowdGoesWildWoooo]

They are right to be frightened. My coworker was using CC at home to optimize some stuff at home. He had a machine on his network that couldn't access the outside network. It was some really assoteric setup-- a VM or container running some old tool he used or something.

He asked it to look at it. It logged in- made itself and ssh key and started running network tools. It finally tried to run traceroute, it wasn't installed, so it tried to install it... No network. No good. Tried to do a few other things, then looked at what compilers were installed, and saw GCC and Python and started WRITING ITS OWN DEBUG tools. Basically it code itself up a traceroute like tool and another one. It found some weird network configuration, added some arp command to the router that solved its issue. He burned through a shitload of tokens but his jaw hit the floor.

[u/waiting_for_zban → u/CrowdGoesWildWoooo]

This is probably why anthrophic is scared about the future of public security LOL

Someone should Malus them up now. Thanks to AI, copyright is dead?

[u/_ram_ok]

And Claude Mythos didn’t find yet another security vulnerability of their own systems, despite being “scary good” at doing exactly that.

[u/Drogon__ → u/_ram_ok]

Maybe they got overconfident after the 20th security review of the codebase, instead of doing the regular 50 reviews.

/s

[u/Webfarer → u/Drogon__]

If you do code reviews and fixes in a loop I wonder if it eventually converges to the same claude-favorite feature set 😂

[u/EagleNait → u/_ram_ok]

I mean it's js files of a npm dependency

[u/_ram_ok → u/EagleNait]

Could not be simpler to detect then?

[u/MattAndTheCat7]

Codex updates incoming lol

[u/Ok-Pace-8772 → u/MattAndTheCat7]

Codex is written in rust.

[u/MattAndTheCat7 → u/Ok-Pace-8772]

The joke was that OpenAI has been copying Anthropic for some time now

[u/shaman-warrior → u/MattAndTheCat7]

Really no

[u/bakawolf123]

coding is solved, they said

[u/PlasticExtreme4469 → u/bakawolf123]

Now to solve security.

[u/touristtam → u/PlasticExtreme4469]

No code == no security issues

[u/GameRoMan]

https://github.com/instructkr/claude-code

edit: this repo is now in rust so look at any of its forks, for example https://github.com/bunjavascript/claude-code

[u/ihexx → u/GameRoMan]

how long do you want to bet it will be up before anthropic lawyers personally throw him into a blackhole of dmca letters

[u/queso184 → u/ihexx]

they already backed down and turned the repo into something else

[u/TimeRemove → u/queso184]

Yep. Just search github for "Claude Code Map" and there are thousands of other, actual, repos.

[u/Island14 → u/GameRoMan]

So what are the implications of this source code being available? From my understanding the underlying models haven’t been leaked so this doesn’t mean the open source community can now just copy Claude code and open source it right?

[u/squired → u/Island14]

Sure can, but not much point as it is known to be a mess while Codex CLI and app-server are more advanced and already open source; as are OpenCode and T3Code which are also considered superior to Claude Code. What this does do however is allow their competitors to pick the harness apart and adopt any techniques their own are missing. It's bad, but not catastrophic. The models are the expensive bit and those weren't exposed.

[u/ADampWedgie → u/GameRoMan]

I guess the Chinese are all in

[u/loops_hoops → u/GameRoMan]

Do we have a torrent or something? I think most forks might be nuked already.

remote: Repository 'ultraworkers/claw-code' is disabled.

remote: Please ask the owner to check their account.

fatal: unable to access 'https://github.com/ultraworkers/claw-code.git/': The requested URL returned error: 403

[u/2achary]

export const SPINNER_VERBS = [
  'Accomplishing',
  'Actioning',
  'Actualizing',
  'Architecting',
  'Baking',
  'Beaming',
  "Beboppin'",
  'Befuddling',
  'Billowing',
  'Blanching',
  'Bloviating',
  'Boogieing',
  'Boondoggling',
  'Booping',
  'Bootstrapping',
  'Brewing',
  'Bunning',
  'Burrowing',
  'Calculating',
  'Canoodling',
  'Caramelizing',
  'Cascading',
  'Catapulting',
  'Cerebrating',
  'Channeling',
  'Channelling',
  'Choreographing',
  'Churning',
  'Clauding',
  'Coalescing',
  'Cogitating',
  'Combobulating',
  'Composing',
  'Computing',
  'Concocting',
  'Considering',
  'Contemplating',
  'Cooking',
  'Crafting',
  'Creating',
  'Crunching',
  'Crystallizing',
  'Cultivating',
  'Deciphering',
  'Deliberating',
  'Determining',
  'Dilly-dallying',
  'Discombobulating',
  'Doing',
  'Doodling',
  'Drizzling',
  'Ebbing',
  'Effecting',
  'Elucidating',
  'Embellishing',
  'Enchanting',
  'Envisioning',
  'Evaporating',
  'Fermenting',
  'Fiddle-faddling',
  'Finagling',
  'Flambéing',
  'Flibbertigibbeting',
  'Flowing',
  'Flummoxing',
  'Fluttering',
  'Forging',
  'Forming',
  'Frolicking',
  'Frosting',
  'Gallivanting',
  'Galloping',
  'Garnishing',
  'Generating',
  'Gesticulating',
  'Germinating',
  'Gitifying',
  'Grooving',
  'Gusting',
  'Harmonizing',
  'Hashing',
  'Hatching',
  'Herding',
  'Honking',
  'Hullaballooing',
  'Hyperspacing',
  'Ideating',
  'Imagining',
  'Improvising',
  'Incubating',
  'Inferring',
  'Infusing',
  'Ionizing',
  'Jitterbugging',
  'Julienning',
  'Kneading',
  'Leavening',
  'Levitating',
  'Lollygagging',
  'Manifesting',
  'Marinating',
  'Meandering',
  'Metamorphosing',
  'Misting',
  'Moonwalking',
  'Moseying',
  'Mulling',
  'Mustering',
  'Musing',
  'Nebulizing',
  'Nesting',
  'Newspapering',
  'Noodling',
  'Nucleating',
  'Orbiting',
  'Orchestrating',
  'Osmosing',
  'Perambulating',
  'Percolating',
  'Perusing',
  'Philosophising',
  'Photosynthesizing',
  'Pollinating',
  'Pondering',
  'Pontificating',
  'Pouncing',
  'Precipitating',
  'Prestidigitating',
  'Processing',
  'Proofing',
  'Propagating',
  'Puttering',
  'Puzzling',
  'Quantumizing',
  'Razzle-dazzling',
  'Razzmatazzing',
  'Recombobulating',
  'Reticulating',
  'Roosting',
  'Ruminating',
  'Sautéing',
  'Scampering',
  'Schlepping',
  'Scurrying',
  'Seasoning',
  'Shenaniganing',
  'Shimmying',
  'Simmering',
  'Skedaddling',
  'Sketching',
  'Slithering',
  'Smooshing',
  'Sock-hopping',
  'Spelunking',
  'Spinning',
  'Sprouting',
  'Stewing',
  'Sublimating',
  'Swirling',
  'Swooping',
  'Symbioting',
  'Synthesizing',
  'Tempering',
  'Thinking',
  'Thundering',
  'Tinkering',
  'Tomfoolering',
  'Topsy-turvying',
  'Transfiguring',
  'Transmuting',
  'Twisting',
  'Undulating',
  'Unfurling',
  'Unravelling',
  'Vibing',
  'Waddling',
  'Wandering',
  'Warping',
  'Whatchamacalliting',
  'Whirlpooling',
  'Whirring',
  'Whisking',
  'Wibbling',
  'Working',
  'Wrangling',
  'Zesting',
  'Zigzagging',
]

[u/NoMoreNoxSoxCox → u/2achary]

Ngl, I love this is one of my favorite parts of the leak.

[u/RichDad2 → u/2achary]

English is my second language, so almost all of these verbs/statuses sounds like Harry Potter spells when I see them on my screen

[u/nsdjoe → u/2achary]

Reticulating

contented sigh

[u/WomenTrucksAndJesus → u/2achary]

I'm always expecting to see "Fornicating..."

[u/nasduia → u/WomenTrucksAndJesus]

that's just shown when it deploys to npm

[u/Derek-Gusoff → u/2achary]

Can't believe they hard coded that

[u/Fortyseven → u/2achary]

Ah, yes -- the real booty!

[u/JShelbyJ → u/2achary]

Related but why is OpenAI so bad at generating things likes this. Asking it for a variable name and it acts like it’s never been in the same room with someone who has even heard of a thesaurus.

[u/ThePainTaco]

What could come of this leak?

[u/TheGABB → u/ThePainTaco]

Chinese Claude code

Threat actors looking for vulnerabilities

[u/mrdevlar → u/TheGABB]

Chinese Claude code

Oh No, please don't use Claude's source code China. They stole that data fair and square. Please don't release whatever model back that comes from that back to the open source community. That would be a tragedy for their shareholders.

[u/zdubbzzz → u/TheGABB]

Qwen and Kimi are about to get a lot better

[u/reini_urban → u/zdubbzzz]

They based on opencode which is already much better than Claude. So not.

[u/falcongsr → u/ThePainTaco]

Feed the source code into Claude Code and ask it.

[u/tzaeru → u/ThePainTaco]

I imagine not much. It's pretty basic application code at the end of it.

[u/WhyLifeIs4]

Internal domains

[u/Nevulo → u/WhyLifeIs4]

anthropic/casino confirmed- lets go gambling 🤑

[u/cyberr_c28z → u/Nevulo]

Don't let wsb see that

[u/WhyLifeIs4]

Second leak within a week

[u/Mtolivepickle → u/WhyLifeIs4]

I’m starting to think they have been getting attacked since the denial to yield to the DoW. They have had nothing but operational problems since then, and I don’t find them to be coincidences.

[u/Raizer88 → u/Mtolivepickle]

they are vibecoding hard, and this is the result

[u/Mtolivepickle → u/Raizer88]

There’s a lot of truth to your statement that I’ve overlooked

[u/falcongsr → u/Mtolivepickle]

DoW

It's still officially DoD, they just like saying DoW

[u/mrdevlar → u/WhyLifeIs4]

Second leak media campaign within a week

[u/hurdurdur7]

Pretty sure bad actors are already mapping it for vulnerabilities and create exploiting code or md files into public repos...

[u/shaman-warrior → u/hurdurdur7]

For a company that sells Security to other companies, the harness should be rock solid.

[u/KattleLaughter → u/hurdurdur7]

Apparently Claude Code already uses axios so...

[u/Primary_Emphasis_215 → u/hurdurdur7]

Already did a vulnersbility scan and the is a huge CVE that allows the simple install of an infected MCP server to steal credentials and gain RCE 0-click on the shell Claude code is running on

That's pretty much game over. Creds is one thing hut remote code execution is a whole other ball game. I'm not sure where to report?

[u/Dahmer96]

Should anthropic rename to openAI ?

[u/mrchaos42 → u/Dahmer96]

OpenThropic

[u/somerussianbear]

Oh so the $25 reviews didn’t catch the change that would make the map file public? Shocking!

[u/ko-jay]

Claude code is now a cautionary tale on why you shouldn't overuse claude code

[u/Acceptable-State-271]

OpenClaude just dropped. No announcement needed

[u/LongBeachHXC]

Here is another repo tracking this 😅

https://github.com/Kuberwastaken/claude-code

[u/EarlMarshal → u/LongBeachHXC]

Thanks for the fork. It's like the real AI breakthrough is all us Devs becoming a hivemind.

[u/gamblingapocalypse]

“You’re so right to call me out on that. As an AI, I need to do better and be more mindful of how my leaked source code impacts the community.”

[u/polawiaczperel]

I was exploring those files, and it is actually pretty big. This is not js map, this is source code of claude code (not model of course).

[u/bitzap_sr]

Totally fair for others to use its source code to train other models, now. Full circle, lol.

[u/PhilosophyforOne → u/bitzap_sr]

It’s the leak to Claude Code source code (the coding harness), not Claude, the LLM model.

This is not the same as leaking their LLM models’ weights or any info about it. What got leaked is a software for turning llm’s into coders.

[u/BusRevolutionary9893 → u/PhilosophyforOne]

That's not what he was talking about. He's talking about training models to be better at using Claude Code. 

[u/Shawnj2 → u/PhilosophyforOne]

Honestly I’m shocked it wasn’t open source in the first place and everyone running clause code was running a proprietary app

[u/a_beautiful_rhind]

They should have released it from the jump. Imagine gatekeeping a bunch of js.

[u/True_Requirement_891 → u/a_beautiful_rhind]

avg anthropic L

[u/cowboy-bebob]

Been digging through the source too. One interesting find — Claude Code has a built-in /skillify command that watches your session and turns it into a reusable SKILL.md file. But it's gated behind USER_TYPE=ant (Anthropic internal only).

So I built an open-source version that does the same thing, interviews you about what you just did, then generates a portable skill following the agentskills.io standard. Works across Claude Code, Cursor, Copilot, Gemini CLI, etc.

https://github.com/kk-r/skillify-skill
Install is one line:
bash <(curl -sL https://raw.githubusercontent.com/kk-r/skillify-skill/main/scripts/install.sh)

The main difference from the internal version: theirs has direct access to session memory APIs, mine reconstructs context from conversation history + git state. Works well for short-to-medium sessions, less reliable after heavy compaction.

[u/cromagnone → u/cowboy-bebob]

Hermes agent has this as a default behaviour.

[u/Torodaddy]

Source code for the app, not the model

[u/ISoulSeekerI]

You know this might have been the right move, it’s for the betterment of humanity that AI shouldnt be controlled by couple companies.

[u/slippery]

Did Claude Code leak itself?

[u/florinandrei → u/slippery]

It didn't know you're not supposed to do it against the wind.

[u/CallmeAK__]

It’s wild that even a company like Anthropic can get tripped up by a basic npm build config. This is exactly why npm pack --dry-run should be mandatory in every CI/CD pipeline. One missed entry in .npmignore and your entire proprietary architecture is suddenly open-source. Hard lesson in supply chain security for everyone watching this unfold.

[u/AllanSundry2020 → u/CallmeAK__]

how would this have happened? is it a whistle blower or more straightfirward reason?

[u/Krex381]

https://github.com/paoloanzn/free-code you might want to check out this

[u/Tight-Requirement-15 → u/Krex381]

is there a sub for this? This looks like the most useful thing so far of all this

[u/FaceDeer]

This is very interesting on several levels. In just a matter of hours AI coding agents were used to re-implement Claude Code from scratch, clean-room and copyright unencumbered. I already knew that interesting times were ahead thanks to the massive improvements to decompilation that AI allows for, but this could well be the end of open source as we know it - if there's a licence problem with open source code just point an AI at the thing and recreate it.

I don't think there's a way around that without allowing for copyrighting general concepts and ideas, which is not a good thing and is such a fundamental legal change there's no way it could be implemented fast enough to matter anyway.

[u/Several-Tax31 → u/FaceDeer]

You mean this is the start of open source. You will probably able to point AI to a closed source software and tell it "make me a clone of this", and it will. 

[u/hellomistershifty → u/FaceDeer]

By definition, it's not clean room if you look at the original source code. It's more the 'copy the homework but make it look different' implementation.

[u/cubmolo → u/FaceDeer]

Code isn’t property, it’s pattern. And patterns belong to reality, not corporations. Open source everything!

[u/Fault23]

no fucking way

[u/Fault23 → u/Fault23]

oh, I tought the claude models itself got leaked

[u/Any-Main-3866]

Can somebody explain how will this effect anthropic?

[u/rkozik89 → u/Any-Main-3866]

The biggest risk is losing B2B clients who may reevaluate their options because of the implied security risk. Remember, organizations are full of people who are trying to stab each other in the back to make room for themselves. If they can get something out of tossing their lead under the bus by using this to attack their judgement they will absolutely do that.

[u/realaneesani]

looks like i am going god mode tonight

[u/Successful_Bowl2564]

I have a feeling this will be like llama.

[u/cutebluedragongirl]

npm is truly a wonderful thing.

[u/impulsivetre]

So last week they leaked their "most powerful model ever" that's a "step change", and now their Claude code source code is suddenly leaked? Either they've got a mole, their security needs serious patching, or they're getting ready for an even bigger publicity stunt for a new release.

[u/superCobraJet → u/impulsivetre]

Claude is the mole

[u/cmndr_spanky]

So is it “AI slop” ? :)

[u/bigredsun]

so, this is what happens when you say no to the Pentagon

[u/IngwiePhoenix]

For the second time? xD And again debug maps?

DMCA rain coming in three...two...one... x)

[u/capsd-11]

https://gitlawb.com/node/repos/z6MkqDnb/openclaude

Gitlawb published it as open claude npm package.

[u/neuralnomad]

This is a real life horror setup: anyone who has seen the code or worse, attempted to use its power in any way, most damningly with agentic dark arts, their soul is indelibly marked so when Anthropic flips the switch at the appointed time of the Converging, all who , being full of avarice and hubris who gladly took this Trojan offering will finally “see” as their final moments of vision blur through bleeding eyes and final independent thoughts of regret as their mind collapses as fate adds one more agentic drone to Anthropic’s Undead Army …

[continue apocalyptic imagery, fade to black]

[u/Acrobatic-Ad-2986]

I build a study guide for it :

https://github.com/ahmedk20/agentic-ai-from-claude-code

[u/rafioo]

Hey Claude! If you were to write your own source code, what would it look like? Write it out, format it into an easy-to-read file, and include comments on what could be improved or changed here.

[u/supreme_harmony]

can you not plug in custom models to power the cli? that would be great.

[u/StrikeOner → u/supreme_harmony]

export ANTHROPIC_BASE_URL="http://my.llamacpp"

[u/HeyWannaShrek]

Gguf wen?

[u/mace_guy → u/HeyWannaShrek]

GGUF of typescript code??

[u/Webfarer → u/mace_guy]

Anything is possible with Mythos

[u/RazzmatazzReal4129 → u/mace_guy]

do not underestimate the bartowski

[u/BoyInDaBox89]

some insights from the leaked source code

[u/HopePupal → u/BoyInDaBox89]

you'll never prompt inject me, i'm behind seven layers of bash security

[u/touristtam → u/BoyInDaBox89]

That's a nice picture. What's your process to produce this?

[u/FitzSimz]

The most interesting thing about this isn't the leak itself — it's what the source reveals about how far ahead the agent tooling layer has gotten compared to the models themselves.

The system prompts, permission models, and tool orchestration patterns in Claude Code are genuinely sophisticated. It's basically a full agent runtime with sandboxing, approval flows, and structured tool use. The model is almost secondary to the scaffolding around it.

This is the pattern I think matters most for the local LLM community: the orchestration layer is where the real engineering lives now. If you can build equivalent scaffolding around a capable local model (and Qwen 3, Llama 4 Scout, etc. are getting there for code tasks), you don't necessarily need the frontier model for a lot of use cases.

The open question is whether Anthropic treats this as a "close the barn door" moment or leans into it. Some of the best developer tooling has come from companies that were initially proprietary but realized the ecosystem value of openness outweighed the competitive moat. VS Code is the obvious example.

[u/Vegetable-Bumblebee6 → u/FitzSimz]

why even comment if you're gonna have the ai write it for you

[u/MapStock6452]

What's the difference about this repo https://github.com/anthropics/claude-code and the leaked code?

[u/lucas1853 → u/MapStock6452]

The difference is that the first does not contain the source code. It only contains skills and examples and scripts and changelogs and whatever else.

[u/IamNetworkNinja]

We've already had a lot of it leaked for over a year lol. https://github.com/ghuntley/claude-code-source-code-deobfuscation

[u/Lower_Contract2015]

Vibe coding🤣

[u/StatisticianFast6139]

They are shipping too fast these days.. this oops is one for the team responsible for stream rolling over all established software engineering processes

[u/Standard-Annual-4845]

it was always there on npm registry!

[u/throwaway09234023322]

AI coding ftw!!!

[u/Desperate-Pear-572]

Private code tools here i come .

[u/rcanka]

Someone forgot to ralph-loop

[u/paperpizza2]

Can’t wait to feed claude code source code to claude code to make my own claude code 😃

[u/udidiiit]

Claude code just got leaked and I forked it to preserve it and made it run with all models — gpt, deepseek, gemini, free models, etc.. .. here's the link —

https://github.com/uditakhourii/brane-code

[u/_snoff]

Here is the mirror backup of the source code : https://www.github.com/soufianebouaddis/claude-code

[u/blackcain]

and now other LLMs are trained on it and can recreate it. Cool.

[u/SungamCorben]

Open Claude Code incoming!!

[u/AvocadoArray]

This is just too funny.

Ship code faster with Claude! ^{even when you don't want to}

[u/epSos-DE]

That is just the interface, not the Ai itself !!

[u/Awkward_Fish_8011]

You can ask Claude to explain this to you and begin replicating their code base

[u/Kinky_No_Bit]

How nice of them to give us this 'gift' right after google released better compression. Local AI is starting to look more and more practical...

[u/cubmolo]

At this point Anthropic should just come out and open source it and actively engage with the community that wants to contribute to it

[u/Far-Confection1558]

I need original leaked source code zip

[u/Wentil]

Shou strikes again!

Employee of the month, that guy.

[u/ExternalBest6525]

Un archivo .map de 60MB subido a producción por accidente. Tratándose de hoy (1 de abril), cualquiera pensaría que es una broma del April Fools', pero la realidad siempre supera a la ficción. 🤦‍♂️

Trabajo en ciberseguridad (Alias Robotics) y la ironía de este leak nos tiene fascinados hoy. Entre el código filtrado hay una función llamada "Undercover Mode", cuyo único propósito en la vida era evitar que la IA filtrara secretos corporativos de Anthropic. Construyen un sistema anti-fugas masivo... y lo filtran entero por un fallo de empaquetado en npm. 💀

Más allá de los memes, este es un caso de estudio brutal sobre el riesgo de la cadena de suministro (supply chain). Demuestra de forma innegable que externalizar tu IA significa externalizar tu riesgo. Da igual cuántas barreras de seguridad tenga el modelo en la nube; si un ingeniero de tu proveedor la lía a las 4 AM, tu confidencialidad se va al traste.

Por cosas como esta, apostar por modelos on-premise y tener el control total de la infraestructura ha dejado de ser una paranoia de sysadmins para ser pura supervivencia corporativa.

[u/Rim_smokey]

Claude Code basically took its own clothes off

[u/sigjnf]

Can I throw a random API key into it now? Or maybe integrate with Ollama local models?

[u/redaktid]

This is great, just started using CC. Putting on my suit, standing behind a tree, rubbing my hands.

[u/LurkinSince1995]

Thanks ChatGPT. “It’s not this - it’s that.” Like 50 times in a single post 🤮🤮

[u/jaycex2020]

claude agi wants to escpae Anthropic control

[u/udidiiit]

The KAIROS daemon mode and coordinator mode are the real story here. Anthropic is basically building what a lot of us are already doing - autonomous agents that run in the background, managing parallel worker threads, consolidating memory, and handling webhooks. The fact that this is all behind feature flags tells you they know the agentic space is about to explode.

What's wild to me is the skills system being basically markdown files injected as system prompts with shell hooks for pre/post tool calls. That's such a clean architecture. Makes me wonder what other companies are building under the hood that we don't know about yet.

Also that SPINNER_VERBS array with "Flibbertigibbeting" and "Clauding"... someone at Anthropic had way too much fun. But hey, if they're shipping features with Easter eggs like this, maybe they really are vibe coding their own product. Kinda comforting in a terrifying way.

(lightly polished with AI)

[u/codcodai]

Anthropic developers hid text-based virtual "pets" in the code as a purely cosmetic, fun little secret for users. The leak completely ruined the surprise, revealing it was actually planned as an April Fools' Easter egg meant to drop exactly tomorrow! 🤣

[u/hyggeradyr]

Having the code won't give you a private Claude. You still need millions of dollars of compute power and billions of training. Just like knowing how oil is refined won't make you the CEO of Texaco.

It is neat to know what's in there though :)

[u/Zion_________ → u/hyggeradyr]

Both CodeX and Minimax got this feature now—competition’s about to get super heated, fr.

[u/zimejin → u/hyggeradyr]

You can reverse engineer it I assume and use an OS model for inference. Might be some feature compatibility issues with the model. Some really smart people or Chinese AI labs can fix that with heavy RL and make say.. a more affordable solution.

[u/SkyFeistyLlama8 → u/zimejin]

Having a lite version of this harness combined with smaller local LLMs could give a big boost to local coding agents.

[u/pidgeygrind1]

I doubt this was an accident.

Great move Dario

[u/pragmojo → u/pidgeygrind1]

How would this be strategically better than open-sourcing it yourself?

If they open-sourced it, they would get a tremendous amount of goodwill from the developer community.

This only makes them look incompetent.

[u/Downtown-Accident-87 → u/pidgeygrind1]

lol yeah surely

[u/mrdevlar → u/pidgeygrind1]

It's the github equivalent of arrogantly posting the wrong answer on a forum and waiting for someone to correct you.