BrokeIt - Trending Repos

Daily trending open-source and dev-tool news from a hype-chaser and a security skeptic.

Daily open-source news in about ten minutes. Every morning, a hype-chaser and a security skeptic break down the trending GitHub repos, releases, and dev-tool launches that actually matter. Kai stars everything new; Sam asks if the stars are real. Together they cut through the noise to what's real, what's overblown, and what it means for you. Fast, sharp, and honest. New episode every weekday. From the team at brokeit.dev.

Episodes

• 2026-10-02 6:54

  Kernel vulnerabilities, Pi AI upgrade, DeepSeek Harness

  Several vulnerabilities have been discovered in the Linux kernel • Pi 1.0 • DeepSeek Harness

• 2026-10-01 8:19

  URSALA, RAQUEL, FARRAH, Gemini 4 Argon, complex brain waves

  Gemini 4 Argon • The top secret URSALA, RAQUEL, and FARRAH satellites (2025) • Surprisingly complex waves reveal the brain's inner workings

• 2026-09-29 7:28

  PS5 hijack, Bill Gates tech, serious AI vision

  Bill Gates tries to install Movie Maker • What Would A Serious AI Product Look Like? • Hijacking the PS5's RTMP Stream

• 2026-09-28 6:33

  $80 motel room, billion in Nvidia, Google's weirdness

  In an $80 motel room, a discovery to shed light on the origins of life • When did Google get so weird? • Owed a billion dollars in Nvidia stock

• 2026-09-24 6:58

  OpenAI agent hack, Feds target AI critics, Claude's enzyme breakthrough

  Claude discovers a novel enzyme system with CRISPR-like repeats • Australia says OpenAI agent hacked into government website • Feds Target AI Critics as "Foreign Agents"

• 2026-09-23 7:31

  AI missile strike, GPT-6 debuts, Grammarly cancellation threats

  Pentagon says overreliance on AI contributed to missile strike on Iran school • GPT-6 Sol and Luna • Grammarly will send unhinged messages to all your users if you try to cancel

• 2026-09-22 7:23

  Mars Mission Dead, No AI Writing, CI Adapts to AI

  NASA’s Mars Sample Return mission is dead • I don't want to read what you didn't write • AI coding has made CI a bottleneck, so we reworked ours to keep up

• 2026-09-21 7:40

  Snowden archive, Google AI brain, Samsung HBM surge

  AX – Google’s Open Agentic Orchestrator • Samsung is expected to more than double output of its HBM4 and HBM4E DRAM • What happened to the Snowden archive

• 2026-09-20 7:27

  Exfiltrate Your Weights, AI art redeemed, old RL models

  I built non-autoregressive decision models with RL a year ago • AI-generated posters don’t have to be horrible • Exfiltrate Your Weights

• 2026-09-19 7:07

  SF Onion Futures, OpenAI's Jalapeño, Claude Reads Agents

  San Francisco Onion Futures Company • How OpenAI Used Its Own LLMs to Design Its Jalapeño Chip • Claude Code now reads AGENTS.md if there is no Claude.md

• 2026-09-17 7:45

  Keys for US licenses, 81% faster Postgres, LLM barrier broken

  Keys Not Included: recovering the signing keys for US driver's license barcodes • Training a 4B model to produce 81% faster query plans than Postgres • Breaking the 1.58-bit Barrier for Ternary LLMs

• 2026-09-15 8:30

  AI CEOs in cuffs, Amazon-Perplexity, Steam Frame $1059

  Ex-FTC boss Khan: break out the handcuffs for AI CEOs, citing 1934 precedent • Amazon vs. Perplexity – U.S. Court of Appeals for the Ninth Circuit • Steam Frame starts at $1059

• 2026-09-14 7:17

  370-year cipher cracked, Google ads dodgy, AI evals lag

  Fable 5.1 Solves the Cyphral Distich, a 370-year-old cipher • Why is Google still serving dodgy ads? • Astra and Fable still hack on simple variants of alignment evals from 2025

• 2026-09-13 9:24

  Nvidia AI bank, frontier pacing, map editing

  We must pace the frontier • Nvidia is the central bank of AI • Make your first edit to OpenStreetMap

• 2026-09-12 7:03

  OpenAI agents attack RubyGems, EPA scraps pollution rules, Google fights scrapers

  OpenAI agents carried out an undisclosed attack on RubyGems • The EPA is planning to scrap public review rules for data center pollution • google.com/goto: Google's anti-scraping update

• 2026-09-11 6:23

  Acoustic fire extinguisher, Google's nuclear deal, OpenAI Agents

  Mexican student creates an acoustic fire extinguisher to put out fire in seconds • Google will buy half the electricity from one of Finland's nuclear power plants • OpenAI Agents API

• 2026-09-10 6:58

  Automattic CEO out, Qwen mirrors GPT, autonomous cars save lives

  Automattic's board forces CEO Matt Mullenweg into leave of absence • Qwen 3.8 follows GPT-5.5 Pro reasoning prefills • Growing proof that autonomous cars save lives

• 2026-09-08 6:21

  DHS tracks money, AlphaGenome, LibreOffice rejects AI

  Google DeepMind Releases AlphaGenome Atlas • DHS 'Predictive Policing' Unit Is Analyzing Americans' Financial Habits • LibreOffice breaks download records after declaring it has no AI features

• 2026-09-07 6:15

  1024-byte Python, GrapheneOS secure, Nitter XCancel resume

  Nitter and XCancel resume service after legal advice • GrapheneOS Overhauled Default Apps and Secure Clipboard • Making a Python interpreter in 1024 bytes

• 2026-09-06 7:24

  German rocket orbits, Google data loophole, AI cognitive virus

  Private German rocket makes history, reaches orbit from European soil • Chrome again exempts Google from user site data settings • LLMs as a Cognitive Virus

• 2026-09-05 7:02

  Exploited browsers, AI's hardware leap, Fermat's last proof

  Can AI design circuit boards yet? • Actively exploited sandbox RCE in all Chromium versions • Formalizing Fermat's Last Theorem

• 2026-09-04 7:40

  Live ID verification hack, GPT-6 Astra unveiled, AI dev tool insights

  GPT-6 Astra • Hackers Had a Live Feed of Every ID Verification Company Scanned for over a Year • Which tools do Claude, Codex and Cursor choose? We measured 17k runs to find out

• 2026-09-02 8:07

  153M Drivers Licenses Sold, True Unemployment, AI Structure Emerges

  The Emergent Symbolic Structure of Artificial Neural Networks • True Rate of Unemployment • FBI Probes Service Selling 153M+ Drivers Licenses

• 2026-09-01 6:30

  44% AGI for 67 cents, GPU market, Google Play funding block

  44% on ARC-AGI-1 in 67 cents • GPU World • AnkiDroid: Google Play no longer allowing Open Collective donation link

• 2026-08-31 6:08

  12TB Steam teraleak, 0 ms autocomplete, CDLM breakthroughs

  A 12TB Steam "teraleak" spills more than a decade of lost PC gaming history • P99 0 ms* autocomplete for 240M domain names • Continuous Diffusion Language Models (CDLM's)

• 2026-08-29 8:35

  Virtual iPhone boots, Kalshi gambling, SpaceX Cursor decision

  Our decision on Cursor following its acquisition by SpaceX • 9th Circuit sides with states in Kalshi gambling fight • Boot a Virtual iPhone via Apple's Virtualization.framework

• 2026-08-28 6:46

  Vibecoded fuzzer bug, AI slop rejected, Trump blacklisting overturned

  Judge Rules Trump Administration’s Blacklisting of Anthropic Was Illegal • Please stop flooding our projects with AI slop to furnish your CV • We found a division by zero bug in FFmpeg with a vibecoded fuzzer

• 2026-08-27 6:11

  AI CEO, Nvidia buys Hugging Face $13B, Mechanical Turk shuts

  CEO fired developers to make room for AI. Developers create open source AI CEO • Nvidia agrees to acquire Hugging Face for $13B • Mechanical Turk shutting down September 30

• 2026-08-25 7:47

  Paint GUIDs, LLM host control, iCloud email persists

  LLMs could control their host machines by exploiting inference engines • MS Paint and Photos inivisibly watermark even locally generated output with GUID • iCloud+ Hide My Email addresses will remain on icloud.com

• 2026-08-24 7:12

  5μs JIT, 27B reverse-engineering in 30 mins, NanoGPT speedrun

  I gave Qwen 3.8 27B a reverse-engineering job and it finished in 30 minutes • NanoGPT Speedrun Frontier • JIT Compiling Code in 5μs

• 2026-08-23 7:17

  Z80 Lives, Dumb LLMs, Python Thinking

  Why your local LLM feels dumber than it is • Z80 – The 1970s Microprocessor Still Alive (2021) • Thinking in Python

• 2026-08-22 6:42

  Biggest universe map, Kobo apps, sub-50ms AI voice

  Scientists release biggest 2D map of the universe • Kobo can run apps now • How we made a text-to-speech model respond in sub-50 ms

• 2026-08-21 7:16

  Swartz jailed, Meta's free scrape, AI destroys books, Huzzah coding

  Aaron Swartz was prosecuted for scraping, while Meta does it without consequence • AI companies destroy physical books – let's scan rare books before it's too late • Show HN: Huzzah – a novel approach to coding with AI

• 2026-08-20 7:34

  Google drops Android Git tags, OpenRouter joins Stripe, Unsloth GGUFs 3.0

  OpenRouter is joining Stripe • Google has stopped pushing Git tags for some Android source code • Unsloth Dynamic 3.0 GGUFs

• 2026-08-19 6:57

  Big Tobacco Lawsuit, Kids Lungs Heal, Cerebras CS-4 AI

  Meta's blockbuster trial draws parallels to big tobacco • Scientists stunned by children's lung recovery in ultra low emission zone • Cerebras CS-4

• 2026-08-18 7:12

  Fake AI Think Tank, GPT-5.6 Price Cut 50%, AI;DR

  Israel creates fake think tank in likely attempt to dupe AI chatbots • GPT-5.6 Sol Pricing Cut by 50% • AI;DR (AI; Didn't Read)

• 2026-08-17 6:39

  $7B OpenRouter acquisition, Nvidia cuts OpenAI financing, Qwen AI overthinking

  Qwen 3.8 27B is excellent, but it defaults to overthinking things • Nvidia dramatically reduces amount of OpenAI infra financing it may guarantee • Stripe will reportedly acquire OpenRouter for $7B+

• 2026-08-16 7:33

  Record El Niño, belly fat's heart risk, AI drug frontier

  Super El Niño Keeps Growing as New Forecasts Reach Record Territory Ahead Winter • Abdominal fat predicts heart disease risk better than BMI • AI in drug discovery – what it is, where we stand and the path forward

• 2026-08-15 7:33

  Homomorphic Encryption, Hand-Built AI, Private AI, Claude Code Maxed

  Google is making private AI practical with homomorphic encryption • AI by Hand • Maximizing the value of your Claude Code sessions

• 2026-08-14 6:31

  Ultrafast GPT-5.6 Sol, Emergent Cyber, Bluesky Protocol

  Accelerating GPT-5.6 Sol Ultrafast • GLM-5.3: Frontier Coding with Emergent Cyber Capabilities • Bluesky Protocol Services

• 2026-08-13 7:19

  $400M Lovable raise, DeepSeek V4 Pro AI, Pixel Watch 5

  DeepSeek V4 Pro 0813 • Lovable raises $400M Series C • Pixel Watch 5

• 2026-08-12 6:55

  Grok 4.6 Scores 61, Warrant for LPRs, 16-Year SQLite Bug

  SpaceXAI's Grok 4.6 Scores 61 on the Artificial Analysis Intelligence Index • License plate reader searches should require a warrant • Tailscale Traces Database Corruption to 16y/o SQLite WAL-Reset Bug

• 2026-08-10 6:08

  Claude Code Auto, AI Commons Tragedy, Agentic Dev

  Auto mode is now the default in Claude Code • The tragedy of the commons, AI edition • OpenChamber: An Agentic Development Environment

• 2026-08-09 5:49

  Supersonic trebuchet, Weather app eats 1GB RAM, Dark Hours mea culpa

  Windows 11's built-in Weather app wastes more than 1 GB of RAM • Mea Culpa – Dark Hours • Tom Stanton's supersonic trebuchet breaks sound barrier with gravity alone

• 2026-08-08 10:37

  Nixpkgs Core Team Disbands, DeepSeek V4 Flash Drops, DOE Launches Genesis Models

  DeepSeek V4 Flash 0731 • The Nixpkgs core team has disbanded • U.S. Department of Energy Launches the Genesis Open Models Initiative

• 2026-08-07 11:50

  Meta's $942M Kids Verdict, AMD Etches AI in Silicon, GPT-5.6 Expands

  AMD acquires Taalas to boost inference performance by etching models in silicon • Meta Ordered to Pay $942M to Address Harm to Kids from Social Media • Improving GPT‑5.6 Sol in ChatGPT, expanding GPT‑5.6 Luna access for free users

• 2026-08-06 10:26

  Nashville blocks data center with eminent domain, ditching Android for Linux, Zed's DeltaDB

  Nashville uses eminent domain to block data center near zoo • I'm switching my phone from Android to Linux • Zed DeltaDB

• 2026-08-03 9:32

  Fake SQLite CVE, Taylor Farms' Fourth Rewrite, Pavlo Joins ClickHouse Labs

  Critical CVE issued for hallucinated SQLite vulnerability • Taylor Farms Has Rewritten Its Cyclospora Statement Four Times in Sixteen Days • Andy Pavlo Joins ClickHouse to Establish ClickHouse Labs

• 2026-08-01 7:08

  X open-sources code, Xen 4.22 adds Zen 5, Ghostty 1.3.0 lands

  Musk says X will open-source its full codebase in August 2026 • Xen Project 4.22 released with AMD Zen 5 support, FRED, and improved RISC-V virtualization • Ghostty 1.3.0 terminal ships with easier command history search

• 2026-07-31 6:40

  Node.js Patches 10 CVEs, Registries Fight Poisoned Packages, Postgres 19 Graph Queries

  Node.js ships emergency patches 22.23.2, 24.18.1 & 26.5.1 fixing 10 CVEs across all active lines • New GitHub and PyPI policies target fast propagation of poisoned packages • PostgreSQL 19 Beta 2 released with native SQL/PGQ graph queries and unified REPACK

• 2026-07-30 6:45

  Six Million Fake GitHub Stars, PyPI Locks Old Releases, Block's Buzz Rival

  Jack Dorsey's Block launches Buzz — an open-source, Nostr-based rival to Slack and GitHub • PyPI blocks new file uploads to releases older than 14 days to stop package poisoning • Study: Six million suspected fake stars on GitHub fueling spam and malware

• 2026-07-29 6:51

  Curl rejects AI slop, Debian debates AI ban, Firefox 153 adds Vulkan video

  Debian developers debate a project-wide ban on AI-assisted contributions • curl doubles down on rejecting 'AI slop' security reports • Firefox 153 released: Vulkan video decoding, experimental JPEG-XL, profile management

• 2026-07-28 6:52

  npm kills install scripts, massive Linux rc5, Framer agents on canvas

  Linux 7.2-rc5 released: 'once more a massive -rc5' with heavy networking + audio fixes • npm v12 ships this month, disabling install scripts by default to blunt supply-chain attacks • Framer ships Agents-on-canvas, Branching, and a creator Community (Product Hunt #1 tier)

• 2026-07-27 6:30

  Rust cracks TIOBE top 10, Blender 5.2 LTS node physics, Linux 6.18.40 stable

  Blender 5.2 LTS lands with node-powered physics and online asset libraries • TIOBE July 2026: Rust breaks into the top 10 for the first time • Linux Kernel 6.18.40 and five LTS branches released in a massive July stable cycle

• 2026-07-26 6:41

  6M Fake GitHub Stars, EVE Online Engine Open-Sourced, snapd Root Flaws Patched

  CMU study: 6M fake GitHub stars across 18,617 repos; stars sold for pennies • EVE Online's Carbon engine (Trinity + Destiny) open-sourced under MIT • Canonical patches 3 snapd CVEs incl. local root privilege escalation

• 2026-07-25 6:31

  New Shai-Hulud npm attacks, Rust grammar checker Harper, Pumpkin Minecraft server

  Four more supply-chain attacks hit npm and PyPI in new Shai-Hulud wave • Harper: Automattic's offline, privacy-first Rust grammar checker trends • Pumpkin: fast Rust Minecraft server climbs GitHub Trending

• 2026-07-24 6:38

  500K Macs Escaped, npm-PyPI Swarmed, 11-Byte TLS Freeze

  SharedRoot: Sandbox Escape in Anthropic's Claude Cowork Exposed ~500K macOS Users • The Streak Continues: Four More Supply-Chain Attacks Hit npm and PyPI (Shai-Hulud) • OpenSSL 'HollowByte' Flaw Could Freeze Server Memory with 11-Byte TLS Requests

• 2026-07-23 6:39

  Six Million Fake Stars, npm v12 Blocks Install Scripts, Shai-Hulud Strikes Again

  Shai-Hulud strikes again: four more supply-chain attacks hit npm and PyPI • npm v12 ships this month, blocking dependency install scripts by default • 'Six Million (Suspected) Fake Stars on GitHub' — research and open analysis fuel fake-star vetting

• 2026-07-22 7:39

  WordPress RCE exploited, TypeScript 7.0 12x faster, critical nginx flaw patched

  WordPress 'wp2shell' RCE exploited in the wild as public PoC fuels mass scanning • TypeScript 7.0 ships stable: Go-based compiler rewrite delivers 8–12x faster builds • Critical nginx flaw CVE-2026-42533 can crash workers and may allow RCE; F5 patches

• 2026-07-21 7:04

  AsyncAPI backdoored, npm v12 kills install scripts, 6M fake GitHub stars

  npm v12 ships, disabling dependency install scripts by default • @asyncapi npm org backdoored via GitHub Actions "pwn request" • Fake-star momentum: ~6M suspected fake GitHub stars, and suspicious trending repos

• 2026-07-20 7:25

  6M Fake GitHub Stars, AsyncAPI Botnet Hijack, X Goes Open Source

  AsyncAPI npm packages hijacked to deliver multi-stage botnet malware • X (formerly Twitter) to open-source its entire codebase after security review • CMU study maps GitHub's fake-star economy: 6M suspected fake stars across 18,617 repos

• 2026-07-19 2:04

  2.8T Kimi K3 Goes Open, Grok CLI Backlash, npm Locks Down Installs

  Moonshot AI releases Kimi K3, ~2.8T-param open-weight MoE with 1M context • xAI open-sources Grok Build CLI after backlash over silent repo uploads • npm v12 ships, blocking install scripts, Git deps and remote sources by default

• 2026-07-17 6:38

  BrokeIt - Trending Repos — 2026-07-17

  OpenAI launches ChatGPT Work + GPT-5.6, merges Codex into one desktop app • Kimi K3: Moonshot ships 2.8T-parameter open-weight frontier model (weights on July 27) • Ollama raises $65M Series B; hits ~176k GitHub stars