REA, the Agent Reverse-Engineering Tool, Reaches 345,994 Stars as Smart-TV Rewrites Spread

REA, an MIT-licensed tool that lets coding agents reverse-engineer software, had 345,994 GitHub stars on Tuesday, October 20, six months after its repository was created.

The repository, morluto/rea, was created on April 14, 2026 and was last pushed on October 20, according to GitHub's API. It has 87,145 forks and 1,468 open issues and pull requests combined. The README names its owner only as "morluto"; the page carries no profile detail.

What REA actually is

REA, short for Reverse Engineer Anything, is a set of tools exposed to an agent over MCP, a local tool-server protocol, plus the same functions as command-line calls. Its README says setup configures Claude Code, Codex, Cursor, Gemini CLI and Grok Build, and that any agent supporting local MCP servers can connect.

Target	How REA reaches it
Native binaries	Hopper, Ghidra or IDA, supplied by the user
JavaScript and Electron apps	Static file inspection
Android APKs, firmware, packet captures	Caller-supplied tools such as JADX, adb and tshark
Websites, .NET assemblies, WASM, EVM bytecode	Listed in the README's target table

The README says results "include the evidence and limitations behind each conclusion." It requires Node.js 22.19 or later, 24.11 or later, or 26+, and installs with npx rea-agents setup.

Why 404 Media is covering it

Jason Koebler, a co-founder of 404 Media, wrote on October 20 that people are pointing coding agents at consumer devices over the past weekend and the days before it. His examples include a smart-TV operating system, smart picture frames, baby monitors and bricked Lululemon mirrors. He also reported AI-driven clones of Adobe and Microsoft Office tools.

He cited an X user, Gathin, whose post about replacing a parent's TV software began "Vibe coded my parents' TV this afternoon!" and which 404 Media said drew more than 6 million views. Koebler wrote that Gathin used Claude Code. The article does not say Gathin used REA, and the README makes no claim about televisions.

404 Media also reported the star count as more than 342,000 when it wrote the piece, which matches GitHub's figure of 345,994 hours later. Koebler's argument is that the output is often buggy and insecure, and that it may land on hardware people cannot fix.

What the README says it will and will not do

The README does not describe a sandbox. It says static JavaScript and .NET inspection reads files without running the app, but that runtime capture "runs or interacts with the selected target using your user permissions." A tool-result also goes to the model provider, so the provider's data policy applies, the README says.

A disclaimer limits use to "lawful research, education, interoperability, software preservation" and to software the user owns or is authorised to examine. The README adds that users "must legally obtain and be authorized to use commercial tools" such as IDA Pro, Hopper and JEB, and that REA grants no licence to them. It also warns that a similarly named repository or a copied README "does not establish that a download is official" and points to morluto/rea, rea.tools and the rea-agents npm package as official sources.

Deep native analysis needs Hopper, Ghidra or IDA installed separately. Windows support for Ghidra is labelled experimental.

What the numbers do and do not show

1. Stars346K count
2. Forks87K count
3. Open issues and PRs1468 count

Source: GitHub API (api.github.com/repos/morluto/rea), accessed 2026-10-20

Stars are a count of clicks, not installs. No source fetched for this report gives a download figure for the rea-agents package, and none measures how many reverse-engineering attempts succeeded. The same applies to other agent repos covered on the site, such as CLI-Anything and OpenCode.

The README says that features newer than the latest npm release depend on release availability, so the code on the main branch may not match what npx installs.