New version flagged as PowerShell attack by antivirus on Windows

[BlackCatCmx]

I'm running into an issue with the latest version of droid.exe on Windows.

When I launch it from Git Bash, the process opens a new window explicitly titled "Windows PowerShell". My antivirus software immediately blocks this, flagging it as a PowerShell-based attack.

This behavior is new to this version and did not occur previously. It appears the startup process now directly involves PowerShell.

[oldium]

It just got blocked for me too. I am running it from PowerShell directly.

Reinstall fixed the issue:

irm https://app.factory.ai/cli/windows | iex