Everything points to OP being hacked and someone else using his login credentials to post that malware-infected software. The question is, how?
There are over 1000 results on Ninjastic Space if you enter R*****X (I don't want to enter the name and give importance to it) with the same or similar ANN that was posted by harizen' account. Most of them date back to March 2023.