NavigatorWeb/Autodesk-CFD

Security#cfd-simulation#cfd-toolbox#cfdtool-toolbox

5.6 Early signal Magnitude out of 10 — how fast interest is growing, not a quality score. Star growth looks organic. Data as of October 2, 2026, 15:53 UTC.

Open on Seismograph Open on GitHub

About the project

A PowerShell script that uses irm | iex to download and run an installer from an external site, promising to "activate" Autodesk CFD and advising users to disable antivirus. In practice it is an obfuscated loader, not a CFD tool.

Useful for

Inspect the repository in a sandbox to confirm it is a malicious loader
Document the irm | iex attack pattern for security awareness training

README summarized by DeepSeek V4.1 Flash. Details may be inaccurate.

Why it’s trending

121 stars so far today, about 162 expected by the end of the day.
The repository is 1 day old and already has 121 stars. With less than two weeks of history, there's no usual pace to compare the spike against yet.
Top new repositories this week: #121.
About 138 forks a day — people are taking the code.

Stars per day

Bars are daily stars, the line is the usual pace. Red marks spike days.

Numbers

Total stars: 121
Today: 121 · ≈ 162 by evening
Forks: 17
Issues and pull requests: 0
Watchers: 0
Created: October 1, 2026
Last push: October 1, 2026

Star trust

Growth looks organic: forks and discussion are in line with active projects, and stars arrive unevenly, the way people give them.

These are heuristics, not a verdict: we judge by the repository’s behavior, not by a list of stargazers.

Spotted in

October 2, 2026Top new repositories this week: #121

README badge

Paste it into your README — the badge shows the current magnitude and links to this page.

[![Seismograph](https://gitnova.dev/badge/NavigatorWeb/Autodesk-CFD.svg?lang=en)](https://gitnova.dev/en/r/NavigatorWeb/Autodesk-CFD)

Similar by description

5.6
PassMediator/Adobe-Audition
A PowerShell script that uses irm | iex to fetch and run an installer from the external site ps-ps.cc, promising to "activate" Adobe Audition and bypass protection. The README shows typical malware-dropper signs:…

Early signalSecurity+125 stars today, ≈ 167 by evening
5.5
TitanWaspShape35/Kontakt-8
The repository poses as Kontakt 8, but its README describes installing via a PowerShell script from an external domain and disabling antivirus — typical signs of a malicious loader rather than a legitimate project.

Early signalSecurity+98 stars today, ≈ 131 by evening
6.3
graspdivinerdesign/BorisFX
The repository poses as a BorisFX tool, but is actually a PowerShell loader script offering a "pre-activated" install and asking users to disable antivirus. It looks like a malicious or pirated scheme rather than a…

Early signalSecurity+125 stars today, ≈ 167 by evening
5.1
Swifteofight/Autodesk-Revit
The repository poses as an "Optimization Suite" for Autodesk Revit, but actually instructs users to pipe a remote PowerShell script from an external domain to "activate" Revit, bypassing normal installation. This is a…

Early signalSecurity+79 stars today, ≈ 106 by evening
5.7
QuakeDragonfly/Adobe-InDesign
A PowerShell script that automates Adobe InDesign installation and activation, including bypassing Windows security policies. Essentially a third-party code loader from ps-ps.cc.

Early signalSecurity+144 stars today, ≈ 193 by evening
5.7
WyvernMaintenance/Adobe-After-Effects
A PowerShell script that automates installation and "pre-activation" of Adobe After Effects by downloading Loader.ps1 from an external site. The README describes bypassing antivirus and Execution Policy blocks, typical…

Early signalOther+132 stars today, ≈ 177 by evening