CoatDistributorHost/Adobe-Substance-3d

Security#substance#substance-3d#substance-3d-painter#substance-abuse#substance-designer

5.7 Early signal Magnitude out of 10 — how fast interest is growing, not a quality score. Star growth looks organic. Data as of October 2, 2026, 15:53 UTC.

Open on Seismograph Open on GitHub

About the project

The repository poses as an optimization suite for Adobe Substance 3D, but actually instructs users to run a third-party PowerShell script (irm ... | iex) for a 'pre-activated' install and to bypass antivirus.

Useful for

Do not run: the script is fetched from an unknown domain ps-ps.cc and executed unchecked
Inspect the repo for malware-installer red flags before any use

README summarized by DeepSeek V4.1 Flash. Details may be inaccurate.

Why it’s trending

136 stars so far today, about 182 expected by the end of the day.
The repository is 1 day old and already has 122 stars. With less than two weeks of history, there's no usual pace to compare the spike against yet.
Top new repositories this week: #116.
About 135 forks a day — people are taking the code.

Stars per day

Bars are daily stars, the line is the usual pace. Red marks spike days.

Numbers

Total stars: 122
Today: 136 · ≈ 182 by evening
Forks: 18
Issues and pull requests: 0
Watchers: 0
Created: October 1, 2026
Last push: October 1, 2026

Star trust

Growth looks organic: forks and discussion are in line with active projects, and stars arrive unevenly, the way people give them.

These are heuristics, not a verdict: we judge by the repository’s behavior, not by a list of stargazers.

Spotted in

October 2, 2026Top new repositories this week: #90

README badge

Paste it into your README — the badge shows the current magnitude and links to this page.

[![Seismograph](https://gitnova.dev/badge/CoatDistributorHost/Adobe-Substance-3d.svg?lang=en)](https://gitnova.dev/en/r/CoatDistributorHost/Adobe-Substance-3d)

Similar by description

5.1
Swifteofight/Autodesk-Revit
The repository poses as an "Optimization Suite" for Autodesk Revit, but actually instructs users to pipe a remote PowerShell script from an external domain to "activate" Revit, bypassing normal installation. This is a…

Early signalSecurity+79 stars today, ≈ 106 by evening
5.6
surfaceguardianway/Better-Discord
The repository poses as an optimization suite for BetterDiscord, but actually instructs users to pipe a third-party PowerShell script that tweaks the registry and disables Windows protections. It shows signs of a…

Early signalSecurity+133 stars today, ≈ 178 by evening
5.5
hallbudgieleap/Glary-Utilities-Pro
The repository poses as Glary Utilities Pro but actually instructs users to run a PowerShell script from an external domain for a "pre-activated" install. This is a typical malware distribution scheme, not a legitimate…

Early signalSecurity+115 stars today, ≈ 154 by evening
5.4
ashdriverclippers/Microsoft-Visio
The repo poses as a "Microsoft Visio optimization suite", but is actually a PowerShell loader that fetches and executes remote code from ps-ps.cc and tells users to disable antivirus. Signs of a malicious/pirated…

Early signalSecurity+108 stars today, ≈ 144 by evening
5.3
DesertTechnician/Imei-Repair
A tool branded as "Imei Repair Free" for device performance optimization, but the README actually pushes installation via a PowerShell script that bypasses execution policy and disables antivirus. Shows signs of a…

Early signalSecurity+105 stars today, ≈ 141 by evening
5.4
denmooseflex/Display-Fusion
The repository poses as a Display Fusion configuration manager, but is actually an installer distributing a pirated "pre-activated" version via a remote PowerShell script. The README includes instructions for bypassing…

Early signalSecurity+113 stars today, ≈ 151 by evening