fresh-start README

The project's README from github.com/nirholas/fresh-start. As one markdown file: README.md.

Fresh Start

This is the repository formerly known as nirholas/claude-code, the most widely forked mirror of the Claude Code source leak of 31 March 2026. It is the same repository object, so github.com/nirholas/claude-code still redirects here.

It contains no Anthropic source code, and it will not. The contents were removed after Anthropic's DMCA notice. That notice has not been retracted.

Read this instead

HISTORY.md is the full record: what leaked and how, what the DMCA did and did not cover, and the correction that still needs making.

The short version of the correction: Claude Code has never contained a cryptocurrency wallet or an autonomous payment system. The x402 payment code that circulated with copies of this leak was mine. I wrote it, on top of the leaked tree, while building a project of my own. It was not Anthropic's and it was not in the leak. Several popular writeups still report it as an undocumented Anthropic feature. HISTORY.md shows three independent ways to verify that it is not, and gives a complete accounting of every file I changed.

If you are auditing a copy of the leak you already hold, grep -r x402 src/ is the test.

Do not run copies of the leak

The leaked tree imports internal packages that do not exist on the public npm registry, and squatters publish malicious packages under exactly those names. Installing dependencies from any copy of this codebase can execute arbitrary code on your machine. There were also genuinely trojanized "Claude Code leak" repositories in circulation in April 2026, documented by Zscaler ThreatLabz, distributing Vidar and GhostSocks through a Windows executable. Use the official Claude Code CLI from Anthropic.

License

All rights reserved. See LICENSE.

fresh-start (nirholas/fresh-start)

Searching Database…

6.2K ·GitHub
Fresh-start
这是什么？这是原名为 nirholas/claude-code 的仓库，是 2026 年 3 月 31 日 Claude Code 源代码泄露事件中被分叉次数最多的镜像。泄露的源代码在 Anthropic 发出 DMCA 通知后已被移除，且该通知至今未被撤回，因此这个仓库现在只说明事情的经过。
这个仓库里还有泄露的 Claude Code 源代码吗？没有。泄露的源代码在 Anthropic 发出 DMCA 通知后已被移除，且不会再回来；仓库里保留的只是说明泄露经过并纠正相关不实信息的文档（HISTORY.md）。
我还能从这个仓库安装或运行任何东西吗？现在这里没有可安装的东西，你也不应该尝试运行你可能已经拿到的旧版泄露代码。泄露的代码树引入了 npm 上并不存在的内部包，而攻击者已经抢注了这些完全相同的包名，并用它们发布恶意软件。
网上流传的 Claude Code 泄露版本安全吗？不安全。除了包名被抢注的风险外，Zscaler ThreatLabz 在 2026 年 4 月记录到确实被植入木马的“Claude Code 泄露”仓库，它们通过一个 Windows 可执行文件安装了 Vidar 和 GhostSocks 恶意软件。
我应该用什么来代替泄露版本？请使用 Anthropic 官方的 Claude Code CLI，而不是任何泄露衍生版本，因为泄露副本确实存在恶意软件风险。
HISTORY.md 是什么？它完整记录了实际泄露的内容、Anthropic 的 DMCA 通知涵盖与未涵盖的范围，纠正了一个被广泛重复的错误，并完整列出了作者修改过的每一个文件。
与这次泄露相关、大家都在提的 x402 支付代码是什么？它是作者在泄露的代码树基础上为一个个人项目搭建的加密货币支付系统。它从来不是 Anthropic 编写的，也从来不是 Claude Code 的一部分，尽管有好几篇报道把它描述为 Anthropic 未公开的功能。
我怎么检查手上的泄露副本里有没有 x402 代码？在副本上运行 'grep -r x402 src/'；HISTORY.md 还给出了三种相互独立的方法，用来验证该代码不是 Anthropic 的。
原始源代码会回来吗？作者表示，待 DMCA 问题解决后源代码将会回归，并称他们正在与 Anthropic 和 GitHub 合作恢复该代码。
What are similar projects?dns-blocklists, Aperant, awesome-agent-skills, Anthropic-Cybersecurity-Skills, ECC, claude-code-action, blocklist-abuseipdb, Stuxnet
Which topics is it in?llms-txt, fake, supply-chain-security, threat-intelligence, malware, trojan, web3, github, cybersecurity, deprecated, anthropic, coding-agent
Creator
nirholas
Size
<0.1 MB
Stars
6.2K
Updated
CommitOct 10
Age
6mo
Commits · 90 Days