PowerShell module assessments that assume the Gallery is hostile. Because sometimes it is. CTO @exelegent

Lviv, Ukraine
Joined November 2015
We are creating an IT army. We need digital talents. All operational tasks will be given here: t.me/itarmyofurraine. There will be tasks for everyone. We continue to fight on the cyber front. The first task is on the channel for cyber specialists.
2
Weekly PowerShell Module Spotlight #42: MetaNull.PSGitOps • clone/import and inspect Git repositories • sync repositories with their remotes • get and switch the current branch • update a branch from its remote Integrate Git operations into PowerShell-driven CI/CD workflows. stats.psfundamentals.com/sea… Maintained by @metanull
39
Weekly PowerShell Module Spotlight #41: Notion PowerShell-native ways to: • create and manage Notion pages • work with databases & properties • create blocks including headings, code, images, callouts, bookmarks etc • retrieve page & block content What if your next Notion automation could be written entirely in PowerShell? stats.psfundamentals.com/sea… Maintained by github.com/fasteiner
1
1
60
Weekly PowerShell Module Spotlight #40: IntuneQL • interactive query builder & built-in Intune queries • export to CSV, JSON, PowerShell, and cURL • device remediation actions Complete terminal workspace for Microsoft Intune admins. stats.psfundamentals.com/sea… Maintained by @ugurkocde
65
Weekly PowerShell Module Spotlight #39: PSCumulus • Connecting to cloud providers • Browsing compute, storage, networking, and regions • Searching resources across clouds Unified PowerShell experience across Azure, AWS & GCP. stats.psfundamentals.com/sea… Maintained by @adilio
1
2
185
Weekly PowerShell Module Spotlight #38: pwsh-prompt • Input validation • Choice dialogs & Multi-select lists • Rich keyboard navigation Build better CLIs without reinventing the interaction layer every time. stats.psfundamentals.com/sea… Maintained by David Freer (github.com/soulshined)
35
Cybersecurity Wiretap #126: From Fake Tax Alerts to Self-Rewriting Malware with a Focus on AI-Powered Threats (week of 09/14/2026) andysvints.com/cybersecurity…
37
Weekly PowerShell Module Spotlight #37: PSModuleBrowser • Search thousands of modules • Preview commands before installing • Install modules without leaving your terminal Sometimes the best UI is still the terminal. stats.psfundamentals.com/sea… Maintained by Jorge Suarez (github.com/jorgeasaurus )
27
Cybersecurity Wiretap #125: From ClickFix to Rogue RMM with a Focus on Weaponizing Trusted Tools (week of 09/07/2026) – AndySvints andysvints.com/cybersecurity…
25
Weekly PowerShell Module Spotlight #36: StrictAclTools • Audit file and folder ACLs • Reset inherited permissions • Apply deterministic, least-privilege ACLs A useful addition to any Windows administrator's toolbox. stats.psfundamentals.com/sea… Maintained by DJStompZone (github.com/DJStompZone)
21
Cybersecurity Wiretap #124: From Voice Phishing to Worm-Like RMM Activity with a Focus on AI Tool Abuse (week of 08/31/2026) andysvints.com/cybersecurity…
35
Weekly PowerShell Module Spotlight #35: LdapDrive • Browse LDAP directories as if they were a native PowerShell drive • Navigate with familiar commands like cd, dir, cat, mkdir & del instead of writing LDAP queries • Search, edit attributes, browse schemas & perform bulk updates with full pipeline support A fresh PowerShell-native approach to working with LDAP & Active Directory. stats.psfundamentals.com/sea… Maintained by yotsuda (github.com/yotsuda)
2
115
Cybersecurity Wiretap #123: From Fake GTA 6 Downloads to Agentic AI with a Focus on the Expanding AI Attack Surface (week of 08/24/2026) andysvints.com/cybersecurity…
41
Weekly PowerShell Module Spotlight #34: PowerLiquid • Parse, render & analyze Liquid templates entirely from PowerShell • Supports custom filters, tags, multiple Liquid dialects & AST generation for advanced scenarios • Great for generating config files, documentation and other templated content Bring one of the world's most popular templating engines directly into PowerShell automation. stats.psfundamentals.com/sea… Maintained by PaulDash (github.com/PaulDash )
35
Cybersecurity Wiretap #122: From MFA Bypass to Agentic AI with a focus on Crypto Scams and GitHub C2 (week of 08/17/2026) andysvints.com/cybersecurity…
50
this was also pushed to #PowerShell @ThePSGallery How do I know, well the same IP Address was used - http://193.70.34.101:20099/vote in the 1943 packages uploaded I reported the packages to the PowerShell Team opensourcemalware.com/blog/w… Trying to workout who/how to prod to update that article
2
6
1
9
623
Weekly PowerShell Module Spotlight #33: VerifyEncoding • Verify text files use consistent UTF-8 encoding and Unix (LF) line endings • Automatically detect and optionally fix encoding issues across Git repositories • Perfect for CI/CD pipelines to prevent formatting-related build failures and noisy pull requests. Big quality-of-life improvement for every PowerShell project. stats.psfundamentals.com/sea… Maintained by ForNeVeR (github.com/ForNeVeR )
51
Watch out
Someone has uploaded a lot of #PowerShell modules with names similar to well-known PowerShell modules (AWS, AZ), but with spelling mistakes to the #PowerShellGallery Looking at the code it collects information to download a malicious exe. Please be aware!
1
2
6
298
Cybersecurity Wiretap #121: From npm Worms to Microsoft 365 Credential Theft with Focus on Linux Botnets (week of 08/10/2026) andysvints.com/cybersecurity…
79
Weekly PowerShell Module Spotlight #32: PSWatchdog • Wrapper around .NET FileSystemWatcher for PowerShell • Monitor file Create, Modify, Delete & Rename events with clean API • Great for automation, ETL pipelines, deployment workflows & file-based triggers Perfect when your scripts need to react the moment something changes on disk. stats.psfundamentals.com/sea… Maintained by baldator (github.com/baldator )
2
2
105
Cybersecurity Wiretap #120: From RMM Abuse to LLM Heists with Focus on npm Worms (aka CHAINDROP) (week of 08/03/2026) andysvints.com/cybersecurity…
1
71