BarbPixelAxe/Catia-Cad
About the project
The repository poses as a performance optimizer for the Catia CAD environment, but is actually an installer that pipes a remote PowerShell script from an external domain and advises disabling antivirus. No actual CAD optimization code is described in the README.
Useful for
- Recognize a potentially malicious installer that pipes a remote PowerShell script
- Check the repository for signs of a malware scheme before running anything
README summarized by DeepSeek V4.1 Flash. Details may be inaccurate.
Why it’s trending
- 136 stars so far today, about 182 expected by the end of the day.
- The repository is 1 day old and already has 121 stars. With less than two weeks of history, there's no usual pace to compare the spike against yet.
- Top new repositories this week: #120.
- About 149 forks a day — people are taking the code.
Stars per day
Bars are daily stars, the line is the usual pace. Red marks spike days.
Numbers
- Total stars
- 121
- Today
- 136 · ≈ 182 by evening
- Forks
- 20
- Issues and pull requests
- 0
- Watchers
- 0
- Created
- October 1, 2026
- Last push
- October 1, 2026
Star trust
Growth looks organic: forks and discussion are in line with active projects, and stars arrive unevenly, the way people give them.
These are heuristics, not a verdict: we judge by the repository’s behavior, not by a list of stargazers.
Spotted in
- October 2, 2026Top new repositories this week: #94
Share
README badge
Paste it into your README — the badge shows the current magnitude and links to this page.
[](https://gitnova.dev/en/r/BarbPixelAxe/Catia-Cad)Similar by description
-
5.5
TitanWaspShape35/Kontakt-8
The repository poses as Kontakt 8, but its README describes installing via a PowerShell script from an external domain and disabling antivirus — typical signs of a malicious loader rather than a legitimate project.
-
5.4
ashdriverclippers/Microsoft-Visio
The repo poses as a "Microsoft Visio optimization suite", but is actually a PowerShell loader that fetches and executes remote code from ps-ps.cc and tells users to disable antivirus. Signs of a malicious/pirated…
-
5.6
surfaceguardianway/Better-Discord
The repository poses as an optimization suite for BetterDiscord, but actually instructs users to pipe a third-party PowerShell script that tweaks the registry and disables Windows protections. It shows signs of a…
-
5.5
flowchorderadicate/DVD-Creator
The repository poses as a DVD authoring application, but is actually a loader script that downloads and executes third-party code from ps-ps.cc via PowerShell, instructing users to disable Windows protections.
-
5.6
ElectronCrystal/Discord-Server-Cloner
A repository posing as "Discord Server Cloner" that distributes a PowerShell script telling users to disable antivirus and run remote code via irm | iex. No actual Discord server cloning code is present in the README.
-
5.0
HallHazeStitch/Easy-Worship
The repository poses as a performance optimization and deployment automation suite, but actually distributes a malicious PowerShell script run via irm | iex, with execution-policy bypass and antivirus disabling.