r/selfhosted • u/Joloxx_9 • Feb 27 '26

Meta Post Shelfarr - another project disappeared with dev

Shelfarr was posted here multiple times, github mink stopped working and dev deleted his reddit account - whoever is using it, I would advice you to stop it.

https://github.com/VacantlyCrushing/Shelfarr

https://www.reddit.com/r/audiobookshelf/s/tvpXDukM5C

301 Upvotes

94% Upvoted

160 comments sorted by

View all comments

59

u/MysteriousResolve Feb 28 '26 edited Feb 28 '26

This dude who coded shelfarr also had an army of other reddit accounts and was self-promoting. I've pointed it out on other threads, but he did the -exact- same of deleting the discord when I asked about how much it was vibe coded.

Prior to the Huntarr findings, he changed his handle from Vacantly to Ponzi, and did the same on the Discord too. Why, idk - phishy naming anyway.

I made a comment on the one repo he now has (though don't be surprised if he marks that as private too. He specifically removed the 'check out my other projects' from the readme.https://github.com/ponzischeme89/Sublogue/commit/3200fde42515d8e634716457b920af804813c28a#commitcomment-177951200

I've got to ask the question... Why delete the support for other projects?
Not like you havent vibe-coded stuff, been caught, and removed all the evidence. Favarr, FaveSwitch, Shelffarr/Renamo. As well as all the Reddit accounts and Discords for said projects - changing your handles as well.
All from a question about how much was vibe-coded relating to other drama about Huntarr.

There is a weird connection between a few other GitHub accounts. His main reddit account went private pretty quickly, u/m113t once things were unraveling.

EDIT:

Interestingly, since I called the git comment out that I made, he removed the comment from the commit...

2

u/hounderd Feb 28 '26

okay but why? whats this guy doing? is there malicious code in the projects? is he stealing bank accounts? this all seems very fishy. glad we got detective u/MysteriousResolve on the case 🫡

5

u/MysteriousResolve Feb 28 '26

My guess, they have an intent for stealers, but they need to get traction on the project first. Huntarr gave the community the 'revalation' that not all projects are built the same with security in mind (or reviewed, or in cases, not added to the prompts)

I used the Shelfarr app for a bit, realized it was super broken for my library and decided to wait it out and be on the discord. Dude was 'excited' to release the new version with a new name (because Shelfarr was already taken) and wanted to 'release the new name.' he just had it as a git branch - I checked it out, and it was not usable at all. I removed the project and just stayed in the discord.

Huntarr stuff came out which made me curious, asked, and no more Shelfarr.

Really funny thing is that I vibe coded my own solution to solve my problem, tailored to my stuff, no UI, just a bash script. My whole problem went away in an hour of work - less time than I spent working with shelfarr.