Releases

One page per release: downloads for your system, what it adds, what changes in what you will see and anything that breaks. The full history is on GitHub.

Indicators are updated every week between releases. Those changes are in the indicator reviews, and a release carries every indicator merged before it.

1. 3.0.0latest4 November 2026The project is now polinrider-scanner, with a new repository name, new package names and a new home at polinriderscanner.com. The program itself is unchanged.Breaking: Every package is renamed to polinrider-scanner; update your install commands and verify 3.x releases against meSingh/polinrider-scanner.What changed and downloads
2. 2.3.03 November 2026Reads review-level indicators locally, finds the attacker's SSH key and the running JavaScript implant, matches campaign files by hash and adds 24 indicators.What changed and downloads
3. 2.2.026 October 2026Ends every guided check on where things stand, matches published campaign files by their hash, and can delete its own copies of repositories.What changed and downloads
4. 2.1.012 October 2026Finds loaders written in escape codes, checks Python startup files and npm's own files, reads lockfiles, and adds a Windows zip and .deb packages.What changed and downloads
5. 2.0.011 October 2026One program in place of the 1.x shell scripts, with a guided flow, machine checks on macOS, Linux and Windows, and GitHub fixes from the push record.Breaking: the 1.x shell scripts are gone; download the binary instead of cloning.What changed and downloads

1.x, the shell tool, is frozen at v1.0.9 and is not listed here.