Nicholas Carlini, a research scientist at Anthropic, demonstrated that Claude Code can identify remotely exploitable security vulnerabilities within the Linux kernel. Most significantly, the AI discovered a heap buffer overflow in the NFS driver that had remained undetected for 23 years. By using a simple script to direct the model's attention to specific source files, Carlini was able to uncover complex bugs that require a deep understanding of intricate protocols. While the discovery highlights the growing power of large language models in cybersecurity, it also presents a new bottleneck: the massive volume of potential vulnerabilities found by AI requires significant manual effort from human researchers to validate and report.
Anthropic's attempt to remove leaked Claude Code client source code from GitHub resulted in the accidental takedown of numerous legitimate forks of its official public code repository. While the overzealous takedown has been reversed, the company faces a significant challenge in containing the spread of the leaked code. The initial DMCA notice targeted a repository hosting the leak and nearly 100 forks, but expanded to impact over 8,100 repositories, including those forking Anthropic's public code. Coders complained about being caught in the dragnet. Despite efforts, copies of the leaked code remain available on platforms like Codeberg, and "clean room" reimplementations are emerging, potentially complicating legal issues.
Rohan, a developer, analyzed the 30MB TypeScript source code of Anthropic’s Claude Code, a terminal-based AI coding agent. While praising the tool’s impressive engineering in areas like its query loop and concurrency system, he identified several architectural choices that appear problematic, particularly given Anthropic’s substantial funding. These issues include a massive single React component, extensive use of feature flags and environment variables, circular dependencies, and convoluted type handling – all indicative of a codebase that grew rapidly without sufficient architectural foresight. Despite these concerns, the tool functions well and is widely used, highlighting the prioritization of functionality over pristine code quality.
* **Giant React Component:** The main interface is a single 5,005-line React component with 227 hook calls, making it difficult to test and maintain.
* **Feature Flag Overload:** 89 feature flags are scattered throughout the code, suggesting a lack of clear product direction and increasing complexity.
* **Circular Dependencies:** 61 files contain workarounds for circular dependencies, revealing a poorly designed module structure.
* **Verbose Type Casting:** A specific type name appears 1,193 times as a cast to ensure safe logging of analytics data, creating unnecessary noise.
* **Conditional Requires & Growth:** Many issues stem from rapid growth; features were added quickly, leading to architectural debt and workarounds like conditional `require()` statements.
* **Giant React Component:** The main interface is a single 5,005-line React component with 227 hook calls, making it difficult to test and maintain.
* **Feature Flag Overload:** 89 feature flags are scattered throughout the code, suggesting a lack of clear product direction and increasing complexity.
* **Circular Dependencies:** 61 files contain workarounds for circular dependencies, revealing a poorly designed module structure.
* **Verbose Type Casting:** A specific type name appears 1,193 times as a cast to ensure safe logging of analytics data, creating unnecessary noise.
* **Conditional Requires & Growth:** Many issues stem from rapid growth; features were added quickly, leading to architectural debt and workarounds like conditional `require()` statements.
This repository contains the leaked source code of Anthropic's Claude Code CLI, which occurred on March 31, 2026, due to a .map file exposure in their npm registry. Claude Code is a terminal-based tool for software engineering tasks, including file editing, command execution, codebase searching, and Git workflow management.
The codebase is written in TypeScript and runs on Bun, utilizing React and Ink for its terminal UI. It features a robust tool system, command system, service layer, bridge system for IDE integration, and a permission system. The project incorporates several design patterns like parallel prefetching and lazy loading to optimize performance.
The codebase is written in TypeScript and runs on Bun, utilizing React and Ink for its terminal UI. It features a robust tool system, command system, service layer, bridge system for IDE integration, and a permission system. The project incorporates several design patterns like parallel prefetching and lazy loading to optimize performance.
This handbook provides a comprehensive introduction to Claude Code, Anthropic's AI-powered software development agent. It details how Claude Code differs from traditional autocomplete tools, functioning as an agent that reads, reasons about, and modifies codebases with user direction. The guide covers installation, initial setup, advanced workflows, integrations, and autonomous loops. It's aimed at developers, founders, and anyone seeking to leverage AI in software creation, emphasizing building real applications, accelerating feature development, and maintaining codebases efficiently. The handbook also highlights the importance of prompt discipline, planning, and understanding the underlying model to maximize Claude Code's capabilities.
Anthropic's AI reliability engineering team is leveraging Claude itself to identify and address issues within the system, but a fully automated approach isn't yet viable. While Claude excels at rapidly analyzing logs and identifying patterns – like detecting fraudulent account creation during a New Year's Eve incident – it frequently struggles with discerning correlation from causation. SREs remain crucial, providing the "scar tissue" of experience to interpret AI findings and prevent misdiagnosis. The article highlights the ongoing need for human oversight, even as AI tools become increasingly sophisticated, and warns against the potential for skill atrophy if reliance on AI becomes too great.
This article advocates for wider adoption of Claude Code, an AI tool from Anthropic designed to write, edit, and fix code. Initially an internal tool for Anthropic developers, it's now publicly available as a command-line tool that operates within your terminal. It can understand natural language instructions to modify codebases, and even assists with non-programming tasks like file organization and research. While the terminal interface can be intimidating, the author suggests using it within an IDE or utilizing the Claude Desktop app's integrated Cowork interface, highlighting its potential for both developers and non-developers.
This article presents findings from a survey of over 900 software engineers regarding their use of AI tools. Key findings include the dominance of Claude Code, the mainstream adoption of AI in software engineering (95% weekly usage), the increasing use of AI agents (especially among staff+ engineers), and the influence of company size on tool choice. The survey also reveals which tools engineers love, with Claude Code being particularly favored, and provides demographic information about the respondents. A longer, 35-page report with additional details is available for full subscribers.
This article explains the concept of 'skills' in the context of language models, detailing how to create and use them to enhance model capabilities. It covers the file structure, YAML configuration, and integration of scripts for task automation, providing a practical guide for developers.
Anthropic is clashing with the Pentagon over the military's use of its AI systems, particularly regarding autonomous weaponry and mass surveillance. A key point of contention arose when the Pentagon asked if Claude could be used to help intercept a nuclear missile, a request Anthropic resisted, raising concerns about unrestricted AI use and potential risks. OpenAI is also signaling it would take a similar stance.
