denmooseflex/Display-Fusion
About the project
The repository poses as a Display Fusion configuration manager, but is actually an installer distributing a pirated "pre-activated" version via a remote PowerShell script. The README includes instructions for bypassing Execution Policy and disabling antivirus.
Useful for
- Do not run: the irm ... | iex command downloads and executes arbitrary code from a third-party server
- Check the repository for malware indicators before any use
README summarized by DeepSeek V4.1 Flash. Details may be inaccurate.
Why it’s trending
- 148 stars so far today, about 193 expected by the end of the day.
- The repository is 1 day old and already has 136 stars. With less than two weeks of history, there's no usual pace to compare the spike against yet.
- Top new repositories this week: #109.
- About 96 forks a day — people are taking the code.
Stars per day
Bars are daily stars, the line is the usual pace. Red marks spike days.
Numbers
- Total stars
- 136
- Today
- 148 · ≈ 193 by evening
- Forks
- 13
- Issues and pull requests
- 0
- Watchers
- 0
- Created
- October 1, 2026
- Last push
- October 1, 2026
Star trust
Growth looks organic: forks and discussion are in line with active projects, and stars arrive unevenly, the way people give them.
These are heuristics, not a verdict: we judge by the repository’s behavior, not by a list of stargazers.
Spotted in
- October 2, 2026Top new repositories this week: #109
Similar by description
-
5.7
ashdriverclippers/Microsoft-Visio
The repo poses as a "Microsoft Visio optimization suite", but is actually a PowerShell loader that fetches and executes remote code from ps-ps.cc and tells users to disable antivirus. Signs of a malicious/pirated…
-
5.6
PassMediator/Adobe-Audition
A PowerShell script that uses irm | iex to fetch and run an installer from the external site ps-ps.cc, promising to "activate" Adobe Audition and bypass protection. The README shows typical malware-dropper signs:…
-
5.4
Macroeablade/Wondshare-Recoverit
The repository poses as a Wondshare Recoverit data-recovery suite, but is actually a PowerShell one-liner that downloads and executes a remote Loader.ps1 from ps-ps.cc, with instructions to disable antivirus and bypass…
-
5.1
Swifteofight/Autodesk-Revit
The repository poses as an "Optimization Suite" for Autodesk Revit, but actually instructs users to pipe a remote PowerShell script from an external domain to "activate" Revit, bypassing normal installation. This is a…
-
6.5
Shoreiucolonnade/KMS-Pico
A tool posing as an environment configuration manager and system optimizer, but actually distributing a Windows/Office activation script via a PowerShell irm | iex command.
-
5.6
MatterInfiltrator/SlideShow-Video-Maker
The repository poses as a slideshow video maker, but actually instructs users to run a third-party PowerShell script for "activation" and dependency installation. The README includes steps to bypass execution policy…