Cyandrestyle/PHP-Storm
About the project
The repository poses as a setup suite for JetBrains PHPStorm, but actually distributes a PowerShell script that executes remote code and advises disabling antivirus. It is an unofficial installer unrelated to JetBrains.
Useful for
- Inspect the Loader.ps1 script before running it to assess risks
- Study the repository as an example of a suspicious installer for security training
README summarized by DeepSeek V4.1 Flash. Details may be inaccurate.
Why it’s trending
- 93 stars so far today, about 118 expected by the end of the day.
- The repository is 1 day old and already has 93 stars. With less than two weeks of history, there's no usual pace to compare the spike against yet.
- Top new repositories this week: #188.
- About 154 forks a day — people are taking the code.
Stars per day
Bars are daily stars, the line is the usual pace. Red marks spike days.
Numbers
- Total stars
- 93
- Today
- 93 · ≈ 118 by evening
- Forks
- 12
- Issues and pull requests
- 0
- Watchers
- 0
- Created
- October 1, 2026
- Last push
- October 1, 2026
Star trust
Growth looks organic: forks and discussion are in line with active projects, and stars arrive unevenly, the way people give them.
These are heuristics, not a verdict: we judge by the repository’s behavior, not by a list of stargazers.
Spotted in
- October 2, 2026Top new repositories this week: #186
Share
README badge
Paste it into your README — the badge shows the current magnitude and links to this page.
[](https://gitnova.dev/en/r/Cyandrestyle/PHP-Storm)Similar by description
-
6.3
HarborLocust/Ashampoo-Uninstaller
The repository poses as an Ashampoo Uninstaller page but actually tells users to run a third-party PowerShell script from an external domain to "install" the software. It is not the utility's source code, but a…
-
5.6
endapothecarysaw/Reason-14
The repository poses as an optimization suite for the Reason 14 DAW, but it is essentially a PowerShell script that downloads and runs a third-party installer while bypassing execution policy and disabling antivirus.…
-
5.9
denmooseflex/Display-Fusion
The repository poses as a Display Fusion configuration manager, but is actually an installer distributing a pirated "pre-activated" version via a remote PowerShell script. The README includes instructions for bypassing…
-
5.8
ashdriverclippers/Microsoft-Visio
The repo poses as a "Microsoft Visio optimization suite", but is actually a PowerShell loader that fetches and executes remote code from ps-ps.cc and tells users to disable antivirus. Signs of a malicious/pirated…
-
6.2
ElectronCrystal/Discord-Server-Cloner
A repository posing as "Discord Server Cloner" that distributes a PowerShell script telling users to disable antivirus and run remote code via irm | iex. No actual Discord server cloning code is present in the README.
-
5.6
weldaxolotlboost/VoiceMod
The repository poses as a Voicemod optimization suite but actually offers a "pre-activated" version installed by piping a remote PowerShell script. The README includes instructions to bypass execution policy and…