6.2K ·GitHub
What is this?
This is the repository formerly known as nirholas/claude-code, the most widely forked mirror of the Claude Code source leak from 31 March 2026. The leaked source itself was stripped out after Anthropic's DMCA notice, which has not been retracted, so the repo now just explains what happened.
This is the repository formerly known as nirholas/claude-code, the most widely forked mirror of the Claude Code source leak from 31 March 2026. The leaked source itself was stripped out after Anthropic's DMCA notice, which has not been retracted, so the repo now just explains what happened.Does this repo still contain the leaked Claude Code source code?No. The actual leaked source was removed after Anthropic's DMCA notice and will not return; what remains is documentation (HISTORY.md) explaining the leak and correcting misinformation about it.
No. The actual leaked source was removed after Anthropic's DMCA notice and will not return; what remains is documentation (HISTORY.md) explaining the leak and correcting misinformation about it.Can I still install or run anything from this repository?There is nothing to install here now, and you shouldn't try to run old copies of the leak you may already have. The leaked tree imports internal packages that don't exist on npm, and attackers have squatted those exact package names with malware.
There is nothing to install here now, and you shouldn't try to run old copies of the leak you may already have. The leaked tree imports internal packages that don't exist on npm, and attackers have squatted those exact package names with malware.Is it safe to use copies of the Claude Code leak floating around online?No. Besides the squatted-package risk, Zscaler ThreatLabz documented genuinely trojanized 'Claude Code leak' repos in April 2026 that installed the Vidar and GhostSocks malware via a Windows executable.
No. Besides the squatted-package risk, Zscaler ThreatLabz documented genuinely trojanized 'Claude Code leak' repos in April 2026 that installed the Vidar and GhostSocks malware via a Windows executable.What should I use instead of a leaked copy?Use Anthropic's official Claude Code CLI rather than any leak derivative, since leak copies carry real malware risk.
Use Anthropic's official Claude Code CLI rather than any leak derivative, since leak copies carry real malware risk.What is HISTORY.md?It is the full written record of what actually leaked, what Anthropic's DMCA notice did and did not cover, and a correction of a widely repeated error, along with a complete accounting of every file the author changed.
It is the full written record of what actually leaked, what Anthropic's DMCA notice did and did not cover, and a correction of a widely repeated error, along with a complete accounting of every file the author changed.What is the x402 payment code everyone associates with this leak?It was a cryptocurrency payment system the author built on top of the leaked tree for a personal project. It was never written by Anthropic and was never part of Claude Code, despite several writeups describing it as an undocumented Anthropic feature.
It was a cryptocurrency payment system the author built on top of the leaked tree for a personal project. It was never written by Anthropic and was never part of Claude Code, despite several writeups describing it as an undocumented Anthropic feature.How can I check if a leak copy I have contains the x402 code?Run 'grep -r x402 src/' on the copy; HISTORY.md gives three independent ways to verify the code is not Anthropic's.
Run 'grep -r x402 src/' on the copy; HISTORY.md gives three independent ways to verify the code is not Anthropic's.Will the original source come back?The author says it will return once the DMCA situation is cleared, and states they are working with Anthropic and GitHub to restore it.
The author says it will return once the DMCA situation is cleared, and states they are working with Anthropic and GitHub to restore it.What are similar projects?dns-blocklists, Aperant, awesome-agent-skills, Anthropic-Cybersecurity-Skills, ECC, blocklist-abuseipdb, Stuxnet, claude-code-action
dns-blocklists, Aperant, awesome-agent-skills, Anthropic-Cybersecurity-Skills, ECC, blocklist-abuseipdb, Stuxnet, claude-code-actionWhich topics is it in?fake, llms-txt, supply-chain-security, threat-intelligence, malware, trojan, web3, github, cybersecurity, deprecated, anthropic, coding-agent
fake, llms-txt, supply-chain-security, threat-intelligence, malware, trojan, web3, github, cybersecurity, deprecated, anthropic, coding-agent