trenchcoat
Free · no sign-up
Website report · 19 Oct 2026

hackernoon.com

“25 Things the Claude Code Leak Reveals About Anthropic’s AI Agents | HackerNoon”

Template-written 52 evidence items
What this means for you

hackernoon.com talked to 17 outside services on a first visit, including 4 that measure visits or show ads.E20E11E5E21

  • Tech check: the site claims live data / analytics and a working app / platform, and its public page shows matching evidence.E51E52E38E38
  • Tech check: the site mentions ai / agents, but we found nothing behind it in what its public page loads.E50
  • Before you click anything, the page loads analytics or ad services: Google Analytics / Tag Manager and Google Ads / DoubleClick.E20E11E5E21
  • 4 cookies were set in your browser, 1 of them by other companies' domains.E28

Tech check

What the site says about itself, next to what its public page actually loads. Facts only, no verdict: you decide.

Nothing found on the public page

AI / agents

“…Things the Claude Code Leak Reveals About Anthropic’s AI Agents by devlogs April 21st, 2026 TLDR Audio Presente…”E50

No matching code, calls or services in what loaded for us.

Evidence found

Live data / analytics

“…They call it tengu — and that name is baked into every analytics event the tool fires: tengu_init → app started tengu_e…”E51

Calls to its own backend: /p/hackernoonMongo2/reactionsE38

Evidence found

A working app / platform

“…app started tengu_exit → app closed tengu_api_error → API call failed tengu_ultrathink → max thinking mode trigg…”E52

Calls to its own backend: /p/hackernoonMongo2/reactionsE38

Calls its own backend /p/hackernoonMongo2/reactionsE38
Wallet code none seen
Contract calls in its code none seen
Talks to AI services none seen
Live connections none seen

What it is

  • The site describes itself as: “A brief npm leak exposed Claude Code’s internals, revealing how Anthropic builds AI agents, memory systems, and orchestration workflows.”E2
  • It's built with React and Next.js (common tools for building web apps).E30E31
  • Notable building blocks in its code: Firebase SDK.E32
  • In your browser it can copy text to your clipboard, stores data in your browser's built-in database and saves small bits of data in your browser.E34E35E36
  • It has sections such as /new, /c, /tagged, /business-blogging, /technology-hackathons and /u.E48E49
  • While loading, it called 1 endpoint on its own servers, such as /p/hackernoonMongo2/reactions.E38

Where your data goes

Analytics & trackingCount visits and record what you do on the page. 3
analytics.google.comGoogle Analytics / Tag Manager: Google's visitor analytics and tag loader 3×E20
www.google-analytics.comGoogle Analytics / Tag Manager: Google's visitor analytics and tag loader 3×E11
www.googletagmanager.comGoogle Analytics / Tag Manager: Google's visitor analytics and tag loader 1×E5
AdvertisingShow ads and follow you across sites to target them. 1
stats.g.doubleclick.netGoogle Ads / DoubleClick: Google's ad network (serving and measuring ads) 1×E21
Sign-in & accountsLog you in or manage accounts. 1
accounts.google.comGoogle Sign-In: log in with Google 2×E7
Backend & data servicesDatabases, search and APIs the app runs on. 2
us-central1-hackernoon-app.cloudfunctions.netFirebase / Google Cloud: app database and hosting 14×E12
hackernoon.imgix.netImgix: image resizing 14×E6
FontsDownload typefaces. 1
fonts.googleapis.comGoogle Fonts: fonts 1×E8
CDNs & hostingDeliver files (scripts, images) quickly from servers near you. 3
storage.googleapis.comGoogle Cloud Storage: file storage 1×E9
www.gstatic.comGoogle static files: Google's static file CDN 8×E18
t0.gstatic.comGoogle static files: Google's static file CDN 1×E14
Not identifiedServices we don't have in our list yet. 6
play.google.comnot identified 3×E22
cdn.iubenda.comnot identified 2×E19
news.google.comnot identified 2×E17
cs.iubenda.comnot identified 1×E23
geolocation-db.comnot identified 1×E16
idb.iubenda.comnot identified 1×E24

How key features work

Sign-in and accounts

Sign-in and account features show up in its code or traffic (accounts.google.com).E7

accounts.google.com

Loading its content

Its content loads from its own API while you browse (/p/hackernoonMongo2/reactions).E38

/p/hackernoonMongo2/reactions

Drawing and editing in the browser

The page draws and edits graphics in your browser using the canvas.E37

canvas

Measuring what you do

Visits and clicks are measured with Google Analytics / Tag Manager and Google tag (gtag.js) (found in its traffic or its code).E20E11E5E33

Google Analytics / Tag ManagerGoogle tag (gtag.js)

How ads get picked

Ads are chosen through ad networks and exchanges (Google Ads / DoubleClick); they receive details about your visit to bid on the ad space.E21

Google Ads / DoubleClick

Saving data on your device

It saves data in your browser (IndexedDB (a browser database) and localStorage), so some things persist between visits.E35E36E29

indexeddblocal_storageIndexedDB

Cookies and storage

Names only. We never store the values.

CookieSet forKeptWhose
_gaE25hackernoon.com about 400 daysthe site
_ga_ECJJ2Q2SJQE26hackernoon.com about 400 daysthe site
g_stateE27hackernoon.com about 180 daysthe site
NIDE28google.com about 183 daysother company

IndexedDBE29: firebaseLocalStorageDb

Pages and API calls

Pages it links to

//new/c/tagged/business-blogging/technology-hackathons/u/archives/about/25-things-the-claude-code-leak-reveals-about-anthropics-ai-agents/lite/anthropics-claude-code-problem-shows-how-fragile-ai-moats-really-are/anthropics-project-glasswing-shows-why-ai-cyber-defense-needs-collaboration/is-anthropics-alignment-faking-a-significant-ai-safety-research/what-anthropics-ai-lawsuit-means-for-the-future-of-publishing/why-anthropics-claude-is-the-only-ai-workspace-you-need-in-2026/building-an-ai-trading-agent-using-anthropics-mcp-part-ii/judge-rules-anthropics-use-of-books-for-ai-training-was-legal-but-pirated-copies-raise-liability/anthropic-data-shows-a-decisive-business-shift-toward-ai-powered-automation/anthropics-mythos-identifies-vulnerabilities-in-highly-sensitive-us-government-systems/anthropics-mythosfable-access-restrictions-suggests-a-new-precedent/hello-anthropic-dont-court-the-third-kick-of-a-mule/judge-finds-ai-training-on-complete-books-reasonably-necessary/shadow-ai-agent-identity-and-the-enterprise-security-visibility-gap/contact/cookies/emails/privacy/sitemap.xml/terms/404/about/[handle]/archives/[year]/archives/[year]/[month]/[day]/auth-linkedin/blogging-templates/business-blogging-trial-credit/c/[category]/c/[category]/topics/c/[category]/writers

Endpoints

Called while loading (seen) or named in the code (code).

bridge.hackernoon.com/p/hackernoonMongo2/reactionsseenE38
us-central1-hackernoon-app.cloudfunctions.net/hackernoonMongo2/reactionscodeE39
us-central1-hackernoon-app.cloudfunctions.net/profilesApi/pinStorycodeE40
us-central1-hackernoon-app.cloudfunctions.net/profilesApi/bookmarkcodeE41
us-central1-hackernoon-app.cloudfunctions.net/hackernoonMongo2/notifications/addcodeE42
bridge.hackernoon.com/quiz/getQuizcodeE43
bridge.hackernoon.com/p/app2/send-quote-emailcodeE44
/apicodeE45
/servicescodeE46
/api/revalidate/xcodeE47

Evidence

Every sentence above points to one of these. Code references show the file, line:column and the short identifier that matched, never the site's code itself.

E1
Page title: 25 Things the Claude Code Leak Reveals About Anthropic’s AI Agents | HackerNoon
page title · https://hackernoon.com/25-things-the-claude-code-leak-reveals-about-anthropics-ai-agents
E2
Page description: A brief npm leak exposed Claude Code’s internals, revealing how Anthropic builds AI agents, memory systems, and orchestration workflows.
page description · https://hackernoon.com/25-things-the-claude-code-leak-reveals-about-anthropics-ai-agents
E3
Main heading: 25 Things the Claude Code Leak Reveals About Anthropic’s AI Agents
page h1 · https://hackernoon.com/25-things-the-claude-code-leak-reveals-about-anthropics-ai-agents
E4
126 request(s) to hackernoon.com
types: 84 script, 29 other, 6 font
GET https://hackernoon.com/25-things-the-claude-code-leak-reveals-about-anthropics-ai-agents · script · 126 requests · network recording
E5
1 request(s) to www.googletagmanager.com
types: 1 script
GET https://www.googletagmanager.com/gtag/js · script · network recording
E6
14 request(s) to hackernoon.imgix.net
types: 14 image
GET https://hackernoon.imgix.net/images/9stzc6PdaiPWno9ojobXWNwx1Jn2-jf13bg8.png · image · 14 requests · network recording
E7
2 request(s) to accounts.google.com
types: 1 script, 1 stylesheet
GET https://accounts.google.com/gsi/client · script · 2 requests · network recording
E8
1 request(s) to fonts.googleapis.com
types: 1 stylesheet
GET https://fonts.googleapis.com/css2 · stylesheet · network recording
E9
1 request(s) to storage.googleapis.com
types: 1 media
GET https://storage.googleapis.com/hackernoon/audios/69e0d90fa8d1d6ac31ae543d-en-US-Wavenet-I-MALE--499c66452e9a2.mp3 · media · network recording
E10
1 request(s) to cdn2.hackernoon.com
types: 1 font
GET https://cdn2.hackernoon.com/HackerNoonV2-Regular.woff2 · font · network recording
E11
3 request(s) to www.google-analytics.com
types: 3 fetch
GET https://www.google-analytics.com/g/collect · fetch · 3 requests · network recording
E12
14 request(s) to us-central1-hackernoon-app.cloudfunctions.net
types: 14 fetch
GET https://us-central1-hackernoon-app.cloudfunctions.net/hackernoonMongo2/sponsorships/sponsored-audio · fetch · 14 requests · network recording
E13
3 request(s) to cdn.hackernoon.com
types: 2 image, 1 media
GET https://cdn.hackernoon.com/images/gptzero-logo.png · image · 3 requests · network recording
E14
1 request(s) to t0.gstatic.com
types: 1 image
GET https://t0.gstatic.com/faviconV2 · image · network recording
E15
1 request(s) to bridge.hackernoon.com
types: 1 fetch
GET https://bridge.hackernoon.com/p/hackernoonMongo2/reactions · fetch · network recording
E16
1 request(s) to geolocation-db.com
types: 1 fetch
GET https://geolocation-db.com/json/ · fetch · network recording
E17
2 request(s) to news.google.com
types: 1 script, 1 document
GET https://news.google.com/swg/js/v1/publisher.js · script · 2 requests · network recording
E18
8 request(s) to www.gstatic.com
types: 7 script, 1 stylesheet
GET https://www.gstatic.com/_/mss/boq-subscribewithgoogle/_/ss/k=boq-subscribewithgoogle.SubscribewithgoogleClientUi… · script · 8 requests · network recording
E19
2 request(s) to cdn.iubenda.com
types: 2 script
GET https://cdn.iubenda.com/cs/iubenda_cs.js · script · 2 requests · network recording
E20
3 request(s) to analytics.google.com
types: 3 fetch
GET https://analytics.google.com/g/collect · fetch · 3 requests · network recording
E21
1 request(s) to stats.g.doubleclick.net
types: 1 ping
GET https://stats.g.doubleclick.net/g/collect · ping · network recording
E22
3 request(s) to play.google.com
types: 2 fetch, 1 ping
GET https://play.google.com/log · fetch · 3 requests · network recording
E23
1 request(s) to cs.iubenda.com
types: 1 script
GET https://cs.iubenda.com/cookie-solution/confs/js/18778700.js · script · network recording
E24
1 request(s) to idb.iubenda.com
types: 1 xhr
GET https://idb.iubenda.com/csdata · xhr · network recording
E25
Cookie '_ga' set for hackernoon.com
kept for about 400 days
cookie _ga on hackernoon.com · value not stored
E26
Cookie '_ga_ECJJ2Q2SJQ' set for hackernoon.com
kept for about 400 days
cookie _ga_ECJJ2Q2SJQ on hackernoon.com · value not stored
E27
Cookie 'g_state' set for hackernoon.com
kept for about 180 days
cookie g_state on hackernoon.com · value not stored
E28
Cookie 'NID' set for google.com
kept for about 183 days
cookie NID on google.com · value not stored
E29
IndexedDB: 1 key(s) saved in your browser
IndexedDB keys: firebaseLocalStorageDb · values not stored
E30
React found in the code
hackernoon.com/_next/static/chunks/9407-4b801577bd903e9b.js @ 1:24191 · “react.element” · pattern scan
E31
Next.js found in the code
hackernoon.com/ (page HTML) @ 1:2668 · “/_next/static/” · pattern scan
E32
Firebase SDK found in the code
hackernoon.com/_next/static/chunks/4829-32ed3fa27f9fba8a.js @ 1:716 · “firebase/app” · pattern scan
E33
Google tag (gtag.js) found in the code
hackernoon.com/ (page HTML) @ 1:401 · “googletagmanager.com/gtag” · pattern scan
E34
Uses the browser ability: clipboard_write
can copy text to your clipboard
hackernoon.com/_next/static/chunks/1826.1ab3736f712279dc.js @ 1:5098 · “clipboard.writeText(” · pattern scan
E35
Uses the browser ability: indexeddb
stores data in your browser's built-in database
hackernoon.com/_next/static/chunks/4829-32ed3fa27f9fba8a.js @ 1:21090 · “indexedDB.open(” · pattern scan
E36
Uses the browser ability: local_storage
saves small bits of data in your browser
hackernoon.com/_next/static/chunks/9752.137f3b29151f9976.js @ 1:7114 · “localStorage.setItem(” · pattern scan
E37
Uses the browser ability: canvas
draws graphics on a canvas
hackernoon.com/_next/static/chunks/3213.7a85381e883f5859.js @ 1:491 · “getContext("2d"” · pattern scan
E38
The page called /p/hackernoonMongo2/reactions on bridge.hackernoon.com (GET)
GET https://bridge.hackernoon.com/p/hackernoonMongo2/reactions · fetch · network recording
E39
Code reader found the endpoint us-central1-hackernoon-app.cloudfunctions.net/hackernoonMongo2/reactions
how: call:fetch
s03-1826.1ab3736f712279dc.js · “us-central1-hackernoon-app.cloudfunctions.net/hackernoonMongo2/reactions” · the code reader
E40
Code reader found the endpoint us-central1-hackernoon-app.cloudfunctions.net/profilesApi/pinStory
how: call:fetch
s03-1826.1ab3736f712279dc.js · “us-central1-hackernoon-app.cloudfunctions.net/profilesApi/pinStory” · the code reader
E41
Code reader found the endpoint us-central1-hackernoon-app.cloudfunctions.net/profilesApi/bookmark
how: call:fetch
s03-1826.1ab3736f712279dc.js · “us-central1-hackernoon-app.cloudfunctions.net/profilesApi/bookmark” · the code reader
E42
Code reader found the endpoint us-central1-hackernoon-app.cloudfunctions.net/hackernoonMongo2/notifications/add
how: call:fetch
s06-9752.137f3b29151f9976.js · “us-central1-hackernoon-app.cloudfunctions.net/hackernoonMongo2/notifications/add” · the code reader
E43
Code reader found the endpoint bridge.hackernoon.com/quiz/getQuiz
how: call:fetch
s06-9752.137f3b29151f9976.js · “bridge.hackernoon.com/quiz/getQuiz” · the code reader
E44
Code reader found the endpoint bridge.hackernoon.com/p/app2/send-quote-email
how: call:fetch
s06-9752.137f3b29151f9976.js · “bridge.hackernoon.com/p/app2/send-quote-email” · the code reader
E45
The code names the endpoint /api
hackernoon.com/_next/static/chunks/main-1491342c9fd612d2.js @ 1:4926 · “/api” · pattern scan
E46
The code names the endpoint /services
hackernoon.com/_next/static/Ighg9hjbzUgzVAUdT8mMf/_buildManifest.js @ 1:7154 · “/services” · pattern scan
E47
The code names the endpoint /api/revalidate/x
hackernoon.com/_next/static/chunks/7225-6efc14fde489eb93.js @ 1:11292 · “/api/revalidate/x” · pattern scan
E48
99 links to pages on the same site
page links · https://hackernoon.com/25-things-the-claude-code-leak-reveals-about-anthropics-ai-agents · /, /new, /c, /tagged, /business-blogging, /technology-hackathons, /u, /archives, /about, /25-things-the-claude-code-leak-reveals-about-anthropics-ai-agents, /lite, /anthropics-claude-code-problem-shows-how-fragile-ai-moats-really-are
E49
Next.js build manifest lists 60 page routes
/, /404, /about/[handle], /archives/[year], /archives/[year]/[month]/[day], /auth-linkedin, /blogging-templates, /business-blogging-trial-credit, /c, /c/[category], /c/[category]/topics, /c/[category]/writers, /coins, /coins/[symbol], /companies
hackernoon.com/_next/static/Ighg9hjbzUgzVAUdT8mMf/_buildManifest.js @ 1:1 · “_buildManifest” · pattern scan
E50
The site says: “…Things the Claude Code Leak Reveals About Anthropic’s AI Agents by devlogs April 21st, 2026 TLDR Audio Presente…”
page text · https://hackernoon.com/25-things-the-claude-code-leak-reveals-about-anthropics-ai-agents · …Things the Claude Code Leak Reveals About Anthropic’s AI Agents by devlogs April 21st, 2026 TLDR Audio Presente…
E51
The site says: “…They call it tengu — and that name is baked into every analytics event the tool fires: tengu_init → app started tengu_e…”
page text · https://hackernoon.com/25-things-the-claude-code-leak-reveals-about-anthropics-ai-agents · …They call it tengu — and that name is baked into every analytics event the tool fires: tengu_init → app started tengu_e…
E52
The site says: “…app started tengu_exit → app closed tengu_api_error → API call failed tengu_ultrathink → max thinking mode trigg…”
page text · https://hackernoon.com/25-things-the-claude-code-leak-reveals-about-anthropics-ai-agents · …app started tengu_exit → app closed tengu_api_error → API call failed tengu_ultrathink → max thinking mode trigg…

Limits

  • We only see what your browser sees: code and requests on a first visit, without logging in or accepting cookie banners. What the servers do with data is invisible from outside.
  • Site code is usually minified (compressed), so names are partly lost and some code may be only partly analysed.
  • Some trackers only load after you accept cookies or log in, so the real list can be longer.
  • We visited from a server in the United States. Sites load different trackers and cookie banners in different countries (visitors in the EU usually get a consent banner first).
  • The tech check compares the site's own words with what its public page loads. Work done on servers, in private code or in separate apps isn't visible here, so 'nothing found' means not visible on the public page, not that it doesn't exist.
  • This text was written from fixed templates because no AI writer was available. It uses exactly the same evidence.
  • The code reader hit its size budget on parts of 53 large bundle file(s); those parts weren't fully analysed.

Facts, not judgements: this page describes what the code and traffic show, not anyone's intent. Not financial advice. Case id o8aRr5Zc.