NeatShift

OP has updated their post, but originally the HN intro included prefixes like "*Title*" and "*Content*." Further exploration of this repo makes me think this is even sketchier. The wiki tells the user that they can trust the app because, "All our releases are signed using Sigstore for authenticity."[0] This text was added in a commit titled "refactor: remove Sigstore and update license to GPL 3.0."[1] And I don't see evidence that the app has ever used Sigstore at all. Further, the LICENSE file includes the beginning of the GPLv3 and abruptly cuts it off 20 lines in with "[... rest of GPL 3.0 text ...]."[2] A low-effort probably AI-generated Windows app that requires Admin privileges and makes false security claims: seems like malware. [0] https://github.com/BytexGrid/NeatShift/blob/aac860504f093bb1... [1] https://github.com/BytexGrid/Nea