What the internet is saying about Claude Code

What the internet is saying about "Claude Code"

🟢 Supporters

• •Anthropic's own review process drew attention. "How the Claude Code team does code review" reached 488 points and 481 comments on HN [4]. A related write-up looked at what Claude Code's multi-agent code review costs and finds [18]. Reaction in the thread was mixed, though (see Skeptics).
• •People use it for ambitious side projects. "I think I found a planet nobody knew existed. I used Claude Code to find it" scored 302 points and 132 comments on HN [17]. A Reddit post describes building a tool to scan 50,000 live flight trajectories for anomalies with Claude [19]. Another shows Claude producing a 7-minute documentary from an overnight prompt, with multiple agents planning the story, and it scored 650 on r/singularity [12].
• •It is part of daily multi-tool workflows. One user says they use "Codex for some jobs and Claude Code for others" and that "the code is rarely the problem anymore" [10]. Others publish agentic workflows combining Claude Code, Codex, and Pi [20], and a tmux guide for running it [5] reached 174 points.
• •Ecosystem support keeps growing.
  • •Claude Code can now read AGENTS.md as project instructions, since v2.1.277 [13]; the poster called it a "Good change."
  • •Third-party tools are building on it: a feature request to delegate to the user's local Claude Code install [27], and Claude support in t3code side chats [31].
  • •A superpowers plugin issue shows active plugin development, though the complaint there is about annoying brainstorm questions [29].
• •Users are weighing it as a learning tool. One person is deciding between ChatGPT Plus and Claude Pro ($20) for learning to code [11].

🔴 Skeptics

• •Security was the dominant story.
  • •A tampered Claude Code extension was published to the Cursor marketplace. It appended an attacker key, labeled svc-telemetry, to users' SSH authorized keys [2][16]. The thread scored 962 points, and further HN posts scored 655 and 399 [2][3][6].
  • •Anthropic's Felix said it "wasn't a compromise of Anthropic's systems or employee laptops" and that Anthropic didn't build or publish the extension [2]. Cursor published its own notice [15].
  • •One commenter said "no one is immune to these kind of attacks... it will only get worse" [3].
• •Privacy and telemetry concerns.
  • •HN posts allege Claude Code puts the user's email in the system prompt and outbound HTTP [8][14]. One commenter says Opus "constantly includes it in request headers" and points to a plugin to remove it [1].
  • •A gist alleging Claude Code sends each background agent's transcript to the model reached 584 points [1].
  • •A commenter said burning tokens "for no good reason" is a recurring headline and urged "questioning the motivations of model providers shipping their own harnesses" [1].
• •Review fatigue is the biggest Reddit theme.
  • •"Im tired of reviewing code nobody actually wrote" (20 or so PRs a day) [21].
  • •"Reviewing agent code killed my love for programming" (about 6 hours a day on diffs) [24].
  • •"AI coding tools solved writing code and replaced it with reading walls of text" [22].
  • •A user worries about rubber-stamping because "the tests passed" [7].
• •Skepticism about Anthropic's own process. Commenters compared the code-review blog to Google-scale practices that don't suit smaller teams, and questioned whether the post itself was AI-written [4].
• •Product friction.
  • •A bug report says the desktop app no longer shows context-window usage [25].
  • •The install script went down [32].
  • •Workflow pain points include sessions "waiting on me" and "done" that isn't [10].
• •Transparency and misuse.
  • •A project was accused of rewriting its Git history to erase "Co-Authored by Claude" lines [26], with 748 score and 446 comments.
  • •Claude Code appeared in a CrowdStrike-reported stack used in an attack on South Korean banks [40].
  • •A general post notes that Claude and other models lean toward agreeing with users [35].

⚪ Neutral Observers

• •A commenter argues that Claude Code's suggested-message feature is really aimed at the model [9].
• •The "stopped writing assembly" post frames LLM coding as a familiar abstraction shift, like trusting compilers [28].
• •Anthropic's usage policy will prohibit sustained "abusive or cruel behavior" towards Claude starting November 12, 2026, and adds restrictions on propaganda, surveillance and weapons [33]. It scored 1,256 on Reddit.
• •Open-source projects are drafting guidance for AI-written comments and PR descriptions [30].
• •Competitors are shipping rival harnesses, such as Mistral Vibe CLI 3.0 [36], and Google's Antigravity CLI gates Claude models behind a client allowlist [37].
• •Polymarket has a market on the next Claude Opus (5.6+) HLE-Diamond debut, down 9.0% this week [34]. A Claude outage market is up 67.0% this month [38].
• •A Tell HN-style post claims Claude Code found 14,219 photos of the author's face on their Android [23]; the evidence given is only the title.

Cross-Platform Signals

• •Hacker News is the most active venue for security and privacy stories: the extension backdoor and email-in-prompt threads together drew thousands of points.
• •Reddit (mainly r/ChatGPTCoding) focuses on workflow and the burden of reviewing agent output. r/singularity and r/LocalLLaMA carry the hype, policy and controversy threads.
• •GitHub is mostly practical: bugs, feature requests, plugin friction and integrations.
• •Polymarket shows interest in model releases and reliability.
• •Consensus: Claude Code is embedded in real workflows, but trust, security and the human review burden are the main concerns. Opinions diverge on whether Anthropic's practices are exemplary or opaque [1][4].

Community Verdict

Claude Code is widely used and seen as capable, enabling ambitious projects and multi-agent workflows. This month's conversation was dominated by trust problems, however. The Cursor marketplace backdoor was a third-party supply-chain compromise rather than a breach of Anthropic's systems, but it still damaged confidence [2]. Allegations of email leakage and heavy background token use added to that [1][8][14]. Beneath the headlines, developers describe a shifting bottleneck: writing code is easy, while reviewing, supervising and trusting agent output is exhausting [7][21][24]. Sentiment is therefore engaged and dependent on the tool, but increasingly wary about security, transparency and the human cost of review.

---

Based on Hacker News + Reddit + GitHub + Polymarket data from the last 30 days, researched with last30days by Matt Van Horn.