Also, how do I verify that this fork isn’t malware wrapped in emulator code?

The code is open source, you read it all, ensure that you download exactly the code you read, and you compile it yourself. That’s the only way, in general, to accomplish this.