ElectronCrystal/Discord-Server-Cloner

Security#discord-channel-cloner#discord-clone#discord-cloner#discord-cloner-bot#discord-dm-cloner

5.9 Early signal Magnitude out of 10 — how fast interest is growing, not a quality score. Star growth looks organic. Data as of October 2, 2026, 16:40 UTC.

Open on Seismograph Open on GitHub

About the project

A repository posing as "Discord Server Cloner" that distributes a PowerShell script telling users to disable antivirus and run remote code via irm | iex. No actual Discord server cloning code is present in the README.

Useful for

Study as an example of a malicious irm | iex pattern for security training
Check the repository for malware indicators before running any scripts

README summarized by DeepSeek V4.1 Flash. Details may be inaccurate.

Why it’s trending

160 stars so far today, about 209 expected by the end of the day.
The repository is 1 day old and already has 147 stars. With less than two weeks of history, there's no usual pace to compare the spike against yet.
Top new repositories this week: #102.
About 192 forks a day — people are taking the code.

Stars per day

Bars are daily stars, the line is the usual pace. Red marks spike days.

Numbers

Total stars: 147
Today: 160 · ≈ 209 by evening
Forks: 18
Issues and pull requests: 0
Watchers: 0
Created: October 1, 2026
Last push: October 1, 2026

Star trust

Growth looks organic: forks and discussion are in line with active projects, and stars arrive unevenly, the way people give them.

These are heuristics, not a verdict: we judge by the repository’s behavior, not by a list of stargazers.

Spotted in

October 2, 2026Top new repositories this week: #102

README badge

Paste it into your README — the badge shows the current magnitude and links to this page.

[![Seismograph](https://gitnova.dev/badge/ElectronCrystal/Discord-Server-Cloner.svg?lang=en)](https://gitnova.dev/en/r/ElectronCrystal/Discord-Server-Cloner)

Similar by description

6.5
Shoreiucolonnade/KMS-Pico
A tool posing as an environment configuration manager and system optimizer, but actually distributing a Windows/Office activation script via a PowerShell irm | iex command.

Early signalSecurity+180 stars today, ≈ 235 by evening
5.0
HallHazeStitch/Easy-Worship
The repository poses as a performance optimization and deployment automation suite, but actually distributes a malicious PowerShell script run via irm | iex, with execution-policy bypass and antivirus disabling.

Early signalSecurity+87 stars today, ≈ 114 by evening
5.9
BarbPixelAxe/Catia-Cad
The repository poses as a performance optimizer for the Catia CAD environment, but is actually an installer that pipes a remote PowerShell script from an external domain and advises disabling antivirus. No actual CAD…

Early signalSecurity+169 stars today, ≈ 220 by evening
5.3
Cyandrestyle/PHP-Storm
The repository poses as a setup suite for JetBrains PHPStorm, but actually distributes a PowerShell script that executes remote code and advises disabling antivirus. It is an unofficial installer unrelated to JetBrains.

Early signalSecurity+93 stars today, ≈ 121 by evening
5.7
ashdriverclippers/Microsoft-Visio
The repo poses as a "Microsoft Visio optimization suite", but is actually a PowerShell loader that fetches and executes remote code from ps-ps.cc and tells users to disable antivirus. Signs of a malicious/pirated…

Early signalSecurity+143 stars today, ≈ 187 by evening
5.7
denmooseflex/Display-Fusion
The repository poses as a Display Fusion configuration manager, but is actually an installer distributing a pirated "pre-activated" version via a remote PowerShell script. The README includes instructions for bypassing…

Early signalSecurity+148 stars today, ≈ 193 by evening