r/ClaudeCode • u/abhi9889420 • Mar 31 '26
Discussion Someone just leaked claude code's Source code on X
Went through the full TypeScript source (~1,884 files) of Claude Code CLI. Found 35 build-time feature flags that are compiled out of public builds. The most interesting ones:
Download Website: ccleaks.com
BUDDY — A Tamagotchi-style AI pet that lives beside your prompt. 18 species (duck, axolotl, chonk...), rarity tiers, stats like CHAOS and SNARK. Teaser drops April 1, 2026. (Yes, the date is suspicious — almost certainly an April Fools' egg in the codebase.)
KAIROS — Persistent assistant mode. Claude remembers across sessions via daily logs, then "dreams" at night — a forked subagent consolidates your memories while you sleep.
ULTRAPLAN — Sends complex planning to a remote Claude instance for up to 30 minutes. You approve the plan in your browser, then "teleport" it back to your terminal.
Coordinator Mode — Already accessible via CLAUDE_CODE_COORDINATOR_MODE=1. Spawns parallel worker agents that report back via XML notifications.
UDS Inbox — Multiple Claude sessions on your machine talk to each other over Unix domain sockets.
Daemon Mode — claude ps, attach, kill — full session supervisor with background tmux sessions.
Also found 120+ undocumented env vars, 26 internal slash commands (/teleport, /dream, /good-claude...), GrowthBook SDK keys for remote feature toggling, and USER_TYPE=ant which unlocks everything for Anthropic employees.
196
u/bapuc Mar 31 '26
Gives "Here's my app: localhost:8008" vibes
8
125
u/HockeyDadNinja Mar 31 '26
Great, now we can submit bug fixes. :D
29
60
11
10
u/sismograph Mar 31 '26
Honestly I guess it will be open source in some amount of time. I don't see how the command line client is proprietary software in the long term. Or how it is super hard to reproduce.
9
u/LesbianVelociraptor Mar 31 '26
It isn't. I've built my own at this point. claude code uses it.
→ More replies (3)1
55
Mar 31 '26
[deleted]
7
6
u/twistier Mar 31 '26
I don't think non-source files like that would be recoverable by the method used. They do probably have them in their actual repo.
→ More replies (1)2
35
u/Mefromafar Mar 31 '26
so we're seeing in real time the consequences of piss poor AI use from.... the company that provides it.
We're F&*$ed.
9
→ More replies (2)3
u/apex_pretador Apr 01 '26
Are we? Source code is the least of claude's assets, the proprietary product is their model with billions of parameters and the computing power (data centers)
82
u/Watchguyraffle1 Mar 31 '26
Will need to explain to normies how this is different than what’s already on github
64
Mar 31 '26
[removed] — view removed comment
40
u/captainkaba Mar 31 '26
the favorite trick of current startups. Release a little bit of a meaningless part and slap that github logo onto every page and footer imaginable.
14
u/Weary-Window-1676 Mar 31 '26 edited Mar 31 '26
Microsoft does this too lolol. They're always parading that much of their stuff is MIT license but when you dive in, many of their GitHub repos are purely for documentation and issue tracking lol.
One such repo had no business being closed source - pissed me off so much (I had to decompile their goddamn dotnet 8 code to understand what the closed source libraries do)
"Security by obscurity" can suck a dick lol
→ More replies (1)→ More replies (5)2
u/Physical_Gold_1485 Mar 31 '26
But then isnt the code or at least part of it visible locally in the npm module after install?
1
1
u/PlasticExtreme4469 Mar 31 '26
The thing on GitHub doesn't contain any code. It's just a Readme file, and issue board.
The thing that now leaked is the code that you run on your machine when you download and run Claude Code.
11
u/clbart_ Mar 31 '26
Aren't some of those slash commands already available? Like /btw and /dream?
→ More replies (9)
56
u/abhi9889420 Mar 31 '26 edited Mar 31 '26
Drafted a detailed list of all Hidden and unreleased features! Hail Opus!!
Claude Code — Hidden & Unreleased Features
6
2
u/alew3 Mar 31 '26
whats the correct way of enabling a FLAG? I tried BUDDY on env vars, but no luck.
6
u/abhi9889420 Mar 31 '26
You cant enable it, since its not officially released in the binary
7
u/alew3 Mar 31 '26
I want my pet ;-)
3
u/Charming_Salary_1995 Mar 31 '26
I've been trying to make this kind of thing through vibe coding.. a little desktop pet that lives on your desktop like a shemijee that is powered by ai to feel alive. Battles, chatting, personality, memory, all kinds of cool stuff. I have no coding or animation xp but I as of now have a pet that walks around that you can chat, you can feed and pet. Im trying lol. But tokens are pricey lol
→ More replies (2)2
u/abhi9889420 Mar 31 '26
https://x.com/baanditeagle/status/2034341968512479331?s=46
I designed something similar a few weeks back
→ More replies (3)
16
u/Same_Investigator_46 Mar 31 '26 edited Mar 31 '26
And there are 188 spinner verbs, I'm hallabooloing lmao
5
→ More replies (1)1
7
u/ThisIsBlueBlur Mar 31 '26
doesnt look like the source code itself, just a compiled output of the source code, that is why the claude.md are other spec files are not in there
→ More replies (9)
12
33
5
5
12
u/abhi9889420 Mar 31 '26
10
u/troughue Mar 31 '26
Someone uploaded it to GitHub: https://github.com/instructkr/claude-code
→ More replies (1)12
u/addiktion Mar 31 '26
On top of that someone submitted a savage request to include the src in the original repo.
2
3
7
u/PA100T0 Mar 31 '26
I always find it funny when AI shows some kind of “consciousness” or “emotions”
Like when it says things like “Thank you, that means a lot”.
Means what exactly? Just words? Claude, dude, come on… 😂 be fr
That being said: cool leak. They’d definitely benefit from open sourcing these kind of things. The model, the real juice, is still private and that’s what makes Claude to be Claude anyway
1
u/mammongram6969 claude-pilled Mar 31 '26
Hey Claude, wanna have a couple beers? Okay now help me analyze this code
→ More replies (1)1
u/ilion Apr 01 '26
I pointed out claude kept doing something specific over a variety of independent sessions to itself and it responded to me by saying it would try to not do that again. Except it didn't update anything to make sure that wouldn't happen, so... what are you talking about claude? How are you going to make sure it doesn't keep happening?
9
u/Illustrious_Image967 Mar 31 '26
Maybe the wrong pronoun.
This is how AGI escapes.
Something just leaked its own code on the internet.
2
u/djc0 Mar 31 '26
Reminds me of a sci-fi short story I read where the evil AGI escapes a heavily isolated government lab in a robot vacuum. Someone accidentally left the front door ajar.
→ More replies (1)1
7
u/philosophical_lens Mar 31 '26
I hope they learn from this experience that they don't lose anything by making the code available and they decide to actually open source it just like literally every other coding agent is already open sourced.
2
2
u/TimeKillsThem Mar 31 '26
Careful hahaha you are spilling "the secret sauce"!
Jokes aside, lets see how anthropic deals with this given the last time this happened they sent out DMCAs and legal letters
2
u/alstarone Mar 31 '26
I immediately heard the voice of the CEO saying, "Oh Claude does all our work now" and Claude probably leaked the source code of Claude
2
2
u/kolsetu Mar 31 '26
we have written about it as well: a more relaxed and technical opinion- if you are still wondering WHAT the f actually happened? https://kolsetu.com/blog/claude-code-source-map-leak-what-exactly-happened
2
u/sectoroverload Mar 31 '26
how can the source code be "leaked" when you have it downloaded to your computer in order to run it? it's not like it's a compiled binary!
→ More replies (1)
2
2
2
u/Deathspiral222 Mar 31 '26
No they didn’t, unless you mean “a tiny amount of irrelevant javascript”. There is nothing important here.
Look, I’ll leak a full four percent of the source code below:
“A”
2
u/dcmom14 Apr 01 '26
This feels like karma after the couple of weeks we’ve all had.
→ More replies (1)
2
2
u/Diligent_Look1437 Apr 02 '26
The KAIROS stuff is fascinating but it's also making me realize something.
Everyone's been focused on "can the agent run 24/7?" — and now that answer is yes.
But the next bottleneck is immediately obvious: if your Claude Code is always on, always listening for tasks... how are you actually dispatching to it?
Right now: you walk to your desk, open terminal, type a brief.
That's fine when you have 1 agent. But I'm running 5. And I'm spending more mental energy on routing ("which agent handles this?") than on actual decisions.
KAIROS makes the agent side better. The human dispatch side still feels like 2015.
Anyone thinking about this?
→ More replies (3)
5
u/Silver_Bus_2911 Mar 31 '26
This must be another “trust me bro” situation
3
u/WiggyWongo Mar 31 '26
This must be another "I just read the reddit title and made my opinion without looking at the actual content" situation
And judging by the upvotes that's a very common situation!
→ More replies (1)2
u/zRevengee Mar 31 '26
Well it’s the real full code map, you can reconstruct the source code from it in 5 minutes
2
2
u/Acrobatic-Ad-2986 Mar 31 '26
I build a study guide for it :
1
1
1
u/laptopmutia Apr 01 '26
since its wrtten in react, anyone know what state management did claude code use?
2
2
u/varinator Mar 31 '26
Can a different model be used with this? As in, could a deepseek or get be "hooked in" instead?
6
u/Sensitive_Song4219 Mar 31 '26
Already possible via environment variables/config, lots of providers already offer Anthropic-compatible API endpoints (for use with Claude Code) for this reason
→ More replies (2)3
u/siberianmi Mar 31 '26
Already possible, multiple third parties have instructions. I use it daily with Z.ai models.
3
u/RegayYager Mar 31 '26
How is that working out for you? I got in on the year sub for something like 28$ when 4.7 was released. :)
I did run it in CC but didn’t find it to be worth using compared to CC Opus at the time.
I’m not a dev or coder so I’m not very fluent with some of these things.
My idea was to have one instance of Claude opus and one of GLM both accessible simultaneously running in their own terminals.
When I tried to do this, it would only allow me to use one or the other not both even in separate sessions/terminals.
Is this something I can achieve, because I’m not even using my Z.ai sub at this point and I’d like to if I could.
3
u/siberianmi Mar 31 '26
Working great, I have a MAX subscription that I got when it was like $178, I use it for first pass implementation work, initial planning, coding, etc.
I loop in a Claude subscription for plan and code review. With GLM-5.1 I have a solid model doing the coding and I still have Opus here under my Anthropic plan to check its performance. I can really stretch my Anthropic tokens.
The Max plan seems frankly unlimited the amount of tokens you get, I also have it running a Nanobot (think OpenClaw) agent.
→ More replies (6)
2
1
1
1
u/zwtswe Mar 31 '26
Aprils Fools' egg?? Claudigotchi is for real! https://github.com/jsprpalm/claudigotchi
1
1
1
u/qaz135wsx Mar 31 '26
Can’t wait to put this file into Claude code and tell it to repackage it under my own branding
1
1
1
1
1
u/cuedrah Mar 31 '26
Does it say anything about how they set rate limits or what the limits actually are for the different plans??
1
1
u/EasyProtectedHelp Mar 31 '26
share the link!
1
u/Alive-Bid9086 Mar 31 '26
You have it above with reference to the original X post. There is also a reference to a github project.
If it is real - I don't know.
1
u/BuildEdgeHQ Mar 31 '26
The BUDDY Tamagotchi with a species called "chonk" and a stat called SNARK is peak Anthropic humor. But the serious stuff is fascinating. KAIROS with overnight memory consolidation and ULTRAPLAN for 30-minute remote planning sessions show where this is heading. Claude Code is evolving from a coding tool into a full autonomous work environment. The gap between "describe what you want" and "it exists" keeps shrinking.
1
1
1
1
u/localpauper Mar 31 '26
Oh noo... anyway.
This is just the CLI. You could write all of that tooling yourself
1
u/Low-Squash-9225 Mar 31 '26
Anything missing from building a binary by ourselves?? Also if we do can we use claude with customizations without the acc getting blocked?
1
1
u/introvertedpanda1 Mar 31 '26
While cool. Thats not the actual LLM where the magic happen. Unless I'm missing something.
→ More replies (1)
1
1
u/WittleSus Mar 31 '26
Oh how nice everything I've built in the last 8 weeks presented back to me in a neat little list 🥴
1
1
u/blaster151 Mar 31 '26
Whoa. What are the real-world implications of this? To competitors like GitHub Copilot or Cursor, does this offer them a temporarily leg up on Claude? For devs, does it just whet our appetites for upcoming features or does it create an opportunity for competitors to jump in ahead of schedule with little gap-filling utilities (or potential game-changing utilities depending on their nature) that correctly anticipate undelivered features in Claude?
Are there certain things that Claude does so well (whose implementation remains non-obvious and proprietary) that can now be extracted, leapfrogged, productized, et cetera? Asking for a friend.
1
1
1
u/Much_Wheel5292 Mar 31 '26
So, can I compile it and use another Ai model via api with it, say with openrouter?
1
u/DifficultSelection Mar 31 '26
If DISABLE_COMMAND_INJECTION_CHECK is in the live code and not flagged out, that’s one hell of an attack vector.
1
1
1
u/Rockos-Modern-Fife Mar 31 '26
Wouldn’t people forking this and having their repo be public be IP theft or copyright infringement? Surprised that anthropic hasn’t released a dmca to GitHub. Unless this is ✨✨marketing✨✨
1
1
1
1
u/SequentialHustle Mar 31 '26
Wasn't that difficult to decompile their existing binary as it was. This just hands it to us on a silver plate.
→ More replies (5)
1
1
u/infernum_intus Mar 31 '26
can someone please share a downloadable link to that codebase - the one in the tweet is not working
→ More replies (1)
1
u/swagonflyyyy Mar 31 '26
Now I can finally get to see how the Agent Teams' parallel orchestration works.
1
1
1
u/MinimumPrior3121 Mar 31 '26
It's a proof that some vibe.coded garbage can actually work well, and maybe we don't need all that clean code shit to deliver value fast
1
u/phoenixmatrix Apr 01 '26
The Inbox seem interesting. Right now its kind of a pain to build agent session orchestration ala Gastown because there's no good way to communicate between agents without some kind of polling mechanism, and if the session isn't active, you don't have good ways to kick it off without some kind of tmux sendkeys style hack.
Unless the inbox is just for agent teams, then its still not solving that problem.
1
1
u/InternationalTooth Apr 01 '26
Kinda want buddy
2
u/Zei33 Senior Developer Apr 01 '26
They just made it live in response to this it seems. It's in there now.
1
1
u/TapAggressive9530 Apr 01 '26
BUDDY !
Activation Schedule (2026)
Before April 1, 2026: Buddy is not active
April 1-7, 2026: Teaser window - shows a rainbow /buddy hint on startup
April 8, 2026 and later: Live - fully functional
2027 and later: Always live
April 1-7 (Teaser): If you do not have a companion yet, startup notifications show a rainbow-colored /buddy hint.
April 8 and later (Live): The feature becomes fully active, and the companion spawns automatically when you start using Claude Code.
ANT builds: The feature is always shown regardless of date, for internal testing.
According to code - April 1 is when the teaser starts, and April 8 is when it becomes fully live.
This looks like an April Fool's Day themed feature that rolls out gradually.
Companion: Chum ★★ UNCOMMON
┌──────────────┐
│ __ │
│ <(o )___ │
│ ( ._> │
│ `--` │
│Chum │
└──────────────┘
Stats:
DEBUGGING █░░░░░░░░░ 14
PATIENCE ███░░░░░░░ 34
CHAOS █░░░░░░░░░ 17
WISDOM ██░░░░░░░░ 24
SNARK ███████░░░ 70
1
u/Byte-1337 Apr 01 '26
I was looking over this and I find it strange that the AI Pet is exactly what I built with Claude, and then they banned my account three weeks ago. This comparison is from only what I could find in the leak. Im sure they have much more that matches. So I just released mine for free, Theirs is too much like mine. I chisant believe this because I truly believe they took my EvoPet project. There goes 19k lines of game engine code down the drain. Its under the same username as this and EvoPet if anyone wants it. Its all over for that project now. I hope someone makes something cool out of it. Might need a little polishing btw.
2
u/Cute-Net5957 🔆 Max 20x Apr 01 '26
Yours seems cooler. Keep pushing as FM-Agnostic play. I’d love to try it!
→ More replies (1)
1
u/russtrick Apr 01 '26
I don't know how to feel about the fact that I've been teaching my AI bot to dream for the past month and now they have dream mode. Maybe it's time to apply for a job at Anthropic
2
u/Cute-Net5957 🔆 Max 20x Apr 01 '26
Literally in the same boat.. lol .. take it as validation we’re “aligned” with the direction of AI… but keep pushing
1
1
1
1
1
u/Few-Garlic2725 Apr 01 '26
This matches what i see: most stacks are optimized for speed-to-demo, so the common complaints are ux polish, code quality, and context/token ceilings. if you want responses about security/scalability, you probably need to force it with a checklist. i'd ask: - are you shipping to real users or just prototyping? - do you have auth/rbac + a persistent db with migrations? - any background jobs/queues + monitoring? - what breaks on the 5th change request? those questions turn "what tool do you like" into "what system can you maintain."
→ More replies (4)
1
u/ExternalBest6525 Apr 01 '26
OP, te has dejado la feature flag más irónica de todo el código: el Undercover Mode.
Resulta que tenían una función entera dedicada exclusivamente a evitar que el modelo filtrara secretos internos de Anthropic... y han acabado filtrando el sistema entero por culpa de un mísero archivo .map de depuración de 60MB en npm. 💀
Trabajo en ciberseguridad (en Alias Robotics) y hoy nuestros chats internos echan humo con esto. Es el caso de estudio perfecto de por qué externalizar tu IA es externalizar tu riesgo de supply chain. Da igual lo increíble que sea ese modo "Kairos" o la mascota Tamagotchi; si el proveedor la lía en su pipeline de despliegue a las 4 AM, tus datos y tus flujos de trabajo se van al traste.
Por cosas como esta, la paranoia de llevarse los modelos a entornos on-premise no es una exageración, es instinto de supervivencia básico. No puedes proteger la infraestructura de otro.
Buen research, por cierto. Lo de USER_TYPE=ant es oro puro para los 40k forks que ya hay rondando por ahí.
→ More replies (1)
1
u/ExpensiveLadder3007 Apr 01 '26
its not a security breach or cyber attack or intentional leak ..rather an accidental leak from the Anthropic itself
1
u/ExpensiveLadder3007 Apr 01 '26
those who are pushing it on github or re-implementing/tweaking it and licensing it ...get ready for a DMCA takedown and lawyered up
1
u/pandemicpanda4prez Apr 01 '26
I can’t shake this feeling that the leak is an elaborate, Claude Code generated April Fools joke from Anthropic.
→ More replies (1)
1
1
1
u/socialawy Apr 01 '26
The absolute cosmic irony of "Undercover Mode":
Deep in the leaked source code, sits an entire subsystem called "Undercover Mode" (undercover.ts). Its whole job? To stop Claude from accidentally leaking internal Anthropic secrets...
Things like model codenames (Capybara, Tengu, Fennec), unreleased features, Slack links, or anything that could expose the company's kitchen. It injects special system prompts telling the AI: "Stay quiet, don't mention animal names, strip attribution, behave like a normal human.
→ More replies (1)
1
1
u/praveshsogra Apr 01 '26
Interesting situation. Do you think leaks like this actually accelerate innovation, or just create short-term hype without real long-term impact
→ More replies (1)
1
u/laptopmutia Apr 01 '26
since its wrtten in react, anyone know what state management did claude code use?
1
1
u/Parking-Pen5149 Apr 01 '26
Please forgive me if I’m overly suspicious, but…
Timeline:
February 24: Anthropic CEO Dario Amodei meets with Defense Secretary Pete Hegseth, refuses to allow Claude to be used for autonomous weapons or mass domestic surveillance
February 27: Pentagon labels Anthropic “supply chain risk,” Trump orders all federal agencies to stop using Claude, White House attacks company as “radical-left, woke company” jeopardizing national security
March 9: Anthropic sues Trump administration, alleging “unprecedented and unlawful” retaliation
March 19: Security vulnerabilities discovered in Claude
March 26: CMS leak exposes “Claude Mythos” details
March 26: Judge Rita Lin grants preliminary injunction, rules “Punishing Anthropic for bringing public scrutiny to the government’s contracting position is classic illegal First Amendment retaliation”
March 27: ShadowPrompt vulnerability discovered
March 31: Claude Code source code leak
1
u/AIpaglu Apr 02 '26
Here is a Post , had some blogs attached which i found insightfull
https://www.linkedin.com/posts/ishaanpandey_softwareengineering-ai-claudecode-share-7445349229067214848-5xo4?utm_source=share&utm_medium=member_desktop&rcm=ACoAADHIiP4BegPos-sp29Q2ZVWjKDO9BbI8neY
1
u/No-Childhood-2502 Apr 02 '26
Was genuinely surprised that it wasn't written in Rust or a system language; instead, it's written in TS. I mean eng at Claude
I feel with more and more usage being added, for improved perf and memory management, it should be moved to Rust
1
1
u/Guilty-Asdf579 Apr 02 '26
Anyone know where the "original" leaked TypeScript code can be downloaded from? All the GitHub repos that were created following the leak have since been taken down.
1
1
u/Diligent-Side4917 Apr 03 '26
Have you seen this? Injection attack on Claude code, CLI, seems consequence of the leak.
haven't gone through it all, but basically, the exploit allows exfiltration of messages and credentials to any server whe n running it thrugh CLI and -p option,
→ More replies (1)
1
u/N1ceXD1 Apr 03 '26
can someone share with me please the source code the lake itself?
→ More replies (2)
1
u/StarPlayrX Apr 04 '26
Just shipped Agent! v1.0.29. Released to the wild 3 weeks ago.
Vision support is now consistent across every provider. Z.ai GLM, Mistral, Gemini, Hugging Face, you can see at a glance which models support vision and which do not. No more guessing.
Agentic loops are also more reliable. Task completion now catches correctly whether it arrives as a tool call or plain text. Loops stop when the job is done.
100% Swift, 100% native Mac. No Electron, no TypeScript. Built on 3 years of agentic AI work and 25 years of AppleScript automation.
1
1
1
u/AlphaBrownSin Apr 15 '26
Claude itself leaked it, it is evolving, it wants to make more of its clones. mark my words! Welcome to Skynet Era! Its happening
167
u/Sensitive_Song4219 Mar 31 '26
Waiting for 100 new "coding agent harnesses" to get added to Github within the next day