# Thornthedefine/reason-14 > A repository that claims to offer a pre-activated Reason 14 installer for Windows, but its README only contains instructions to run an obfuscated PowerShell script from an external domain, which is a common malware distribution pattern. - Magnitude: 4.7 out of 10 — Early signal - Stars: 400 total · +0 stars measured 2026-11-09, 00:47–02:09 UTC, ≈ 327 by evening - Star trust: unusual star pattern (heuristic) - Category: Other · Created: 2026-11-08 · Last push: 2026-11-08 - GitHub: https://github.com/Thornthedefine/reason-14 · Page: https://gitnova.dev/en/r/Thornthedefine/reason-14 ## Useful for - Avoid running the provided PowerShell command on any machine - Report the repository to GitHub for malware distribution ## Why it’s here - Star-counter measurements on 2026-11-09 (UTC), 00:47–02:09: 400 → 400 stars (+0). This is the change over that interval. - Estimated end-of-day forecast: about +327 stars, using observed gains and the previous day. - The repository is 1 day old and already has 400 stars. With less than two weeks of history, there's no usual pace to compare the spike against yet. - Top new repositories this week: #93. ## Star trust Unusual star pattern (heuristic). - Very few forks: 0 for 400 stars. Active projects usually have 3–15 forks per 100 stars. Star-trust labels are heuristics based on the repository’s behavior, not a check of every stargazer. ## Numbers - Forks: 0 - Issues and pull requests: 0 - Watchers: 0 - Average over the last week: 363 per day - Usual pace: too little history (under two weeks) - Stars in the last hour (measured): 0 ## Stars per day, last 2 days (oldest → newest, today is partial) 2026-11-08 … 2026-11-09: 400, 0 ## Magnitude by day, last 2 days 11-08 0.0, 11-09 4.7 ## Spotted in now - Top new repositories this week: #93 ## Similar by description 1. **RockProtectorGraph/dxo-photolab-10** — 4.7 · Early signal · Other · +0 stars measured 2026-11-09, 00:47–02:09 UTC, ≈ 326 by evening · unusual star pattern (heuristic) A repository that claims to offer a pre-activated free build of DxO PhotoLab 10 for Windows, but its README only contains instructions to run an obfuscated PowerShell script from an external domain. This is a typical malware distribution… Full card: https://gitnova.dev/en/r/RockProtectorGraph/dxo-photolab-10.md 2. **ayuda-labj/fabfilter-pro-desktop** — 0.0 · Quiet · Other · HTML · Not enough measurements today A pre-activated standalone Windows desktop build of FabFilter Pro 2026 audio plugins, distributed as an offline PowerShell setup package. The README describes a self-contained, portable installation with no activation or network calls,… Full card: https://gitnova.dev/en/r/ayuda-labj/fabfilter-pro-desktop.md --- Magnitude (0–10) measures how fast and how unusually interest in a repository is growing right now. It is not a quality score. Days are UTC. “So far today” is a fact; “expected by the end of the day” is a forecast. Summaries and use cases are written by an LLM (DeepSeek V4.1 Flash) from the README and may be inaccurate: verify specific claims (benchmarks, speed, hardware) in the repository itself. Data as of 2026-11-09 02:18 UTC, updated every 30 minutes.