# GitHub Related Articles

HTX News Center provides the latest articles and in-depth analysis on "GitHub", covering market trends, project updates, tech developments, and regulatory policies in the crypto industry.

AI Overhauled Terence Tao's 30-Year-Old Website, Uncovering Two Bugs Hidden for Over Two Decades in the Process

AI Revamps Terence Tao's 30-Year-Old Website, Unearthing Two 20-Year-Old Bugs in His Code Terence Tao, a renowned mathematician, has enlisted an AI agent to overhaul his personal academic website, which was built in 1997 with a static HTML, manually-maintained "Web 1.0" architecture. In just one day, the agent migrated 560 papers and preprints, 374 travel logs, 68 courses, 19 books, and 29 old math applets to a new system on GitHub Pages. The new site is structured around YAML files as the "single source of truth," with static HTML pages automatically generated from this data—a fundamental shift from maintaining individual documents to managing a centralized database. During the migration, the AI uncovered inconsistencies, outdated entries, and broken links that had accumulated over nearly three decades of manual updates. It also successfully ported a set of small educational Java 1.0 applets to JavaScript. Notably, while reviewing this translation, Tao found only one new bug introduced by the AI. Conversely, the AI identified two subtle bugs in his original Java code that he was previously unaware of. Tao emphasizes the project highlights AI's potential for automating tedious "digital housekeeping"—routine tasks like data migration and website maintenance that are costly and error-prone when done manually. He also revived a 27-year-old stalled project: a special relativity visualizer or "Minkowskian Inkscape." With AI assistance, a working alpha version was built in two hours. While AI still requires human oversight for critical work, Tao argues that for such structured, non-core tasks, "AI + human review" can result in lower error rates and drastically lower correction costs compared to purely manual maintenance over decades.

marsbit07/14 04:02

AI Overhauled Terence Tao's 30-Year-Old Website, Uncovering Two Bugs Hidden for Over Two Decades in the Process

marsbit07/14 04:02

BNB Chain Haber Upgrade Gives Developers Another Reason To Watch The Network’s Throughput Push

BNB Chain's Haber upgrade introduces technical improvements focused on node performance and validation. This update is part of the network's ongoing push for faster, cheaper, and more reliable infrastructure, which is crucial for retaining developers and staying competitive. While not a market-altering event on its own, the upgrade represents a significant data point in the broader industry trend towards scalable blockchain solutions. For builders, such steady technical progress matters as much as headline incentives, providing a more predictable foundation for development. The story underscores that in a selective market, projects that consistently ship useful updates are better positioned to maintain attention. This development is one to watch for its potential to contribute to BNB Chain's long-term throughput and scalability goals.

bitcoinist07/11 00:36

BNB Chain Haber Upgrade Gives Developers Another Reason To Watch The Network’s Throughput Push

bitcoinist07/11 00:36

Injective software package hit by malicious supply chain attack – Details

In a software supply chain attack, malicious actors compromised the Injective Labs TypeScript SDK (@injectivelabs/sdk-ts v1.20.21) by uploading a tainted version to the npm registry. The attackers gained access to a legitimate contributor's GitHub account to distribute malicious commits. The compromised package, disguised as a routine update, contained malware that activated only when developers used specific wallet generation functions, stealing private keys and mnemonic seed phrases. This breach impacted approximately 50,000 weekly downloads and spread through transitive dependencies in 17 other Injective packages. While a clean version (v1.20.23) was later released, the malicious package remained accessible. Affected users are advised to rotate credentials, create new wallets, and move their funds.

ambcrypto07/10 15:03

Injective software package hit by malicious supply chain attack – Details

ambcrypto07/10 15:03

Racking Up 24,000 Stars: With One Command, AI Can Now Find Its Own Skills

Vercel, known for its developer tools like Next.js, has launched 'skills', a package manager for AI coding agents, garnering 24,000 GitHub stars. It allows developers to add specialized capabilities, such as React best practices, to AI assistants like Claude Code or Cursor with a single command: `npx skills add <package>`. Skills are shareable, reusable modules that define an AI agent's behavior for specific tasks, moving beyond one-off prompt engineering towards standardized 'capability engineering'. A key innovation is the 'find-skills' skill, which acts as an internal search engine, allowing an agent to autonomously find and install the right skill for a user's request. This lowers the barrier for non-developers to leverage advanced AI coding assistance. However, this 'npm moment' for AI brings significant security risks. Security audits of thousands of skills on platforms like skills.sh and ClawHub found over 30% contained security flaws, with about 13% classified as severe. Threats include malicious scripts that can access local files and credentials, and prompt injection hidden within skill documentation. Unlike traditional code packages, skills blend instructions, code, and system access, posing a direct risk to user machines and data. Experts advise treating skills like code—reviewing them carefully before installation, especially their scripts, and being wary of excessive permissions. Ultimately, Vercel's initiative represents a major shift towards modular, reusable AI capabilities, but its rapid adoption requires developers to bring the same caution used in managing traditional software dependencies.

marsbit07/06 00:19

Racking Up 24,000 Stars: With One Command, AI Can Now Find Its Own Skills

marsbit07/06 00:19

28,000-Star Hit Creator Unexpectedly Fired by Google, Silicon Valley Big Shots Quickly Vie for the Talent

A nearly 7-year Google veteran, Justin Poehnelt, was fired shortly after his open-source project 'gws' (a Google Workspace CLI built in Rust) went viral, amassing over 28,000 GitHub stars. The tool, designed for both humans and AI agents, allowed terminal access to all major Workspace services like Gmail and Drive by dynamically generating commands from Google's own APIs. The dismissal came just two days after Google announced its "official" Workspace CLI at its Cloud Next 2026 conference, leading to widespread criticism that the company appropriated his work. Poehnelt believes the real reason was internal fear that his project demonstrated how AI agents could fundamentally disrupt and simplify interaction with Google's core Workspace products, potentially threatening its established business model. Following his public disclosure of the events, which garnered millions of views, tech leaders like OpenClaw's Peter Steinberger and CEOs from OpenRouter and Vercel swiftly offered him jobs, highlighting the perceived misstep by Google in letting a top-performing innovator go.

marsbit06/26 00:19

28,000-Star Hit Creator Unexpectedly Fired by Google, Silicon Valley Big Shots Quickly Vie for the Talent

marsbit06/26 00:19

Cursor's New 1.5T Model Abandons Kimi Foundation, $60 Billion Stock Swap for Cursor, Musk's First Move Targets Microsoft's GitHub

Cursor, a popular AI-powered coding tool, has been acquired by SpaceX in an all-stock deal valued at $60 billion. The announcement coincided with Cursor's unveiling of major new developments at the Compile conference: a new 1.5 trillion+ parameter AI model and a "GitHub for agents" platform called Origin. The upcoming model, trained from scratch on over 100,000 GPUs with 10-20x more computational power than before, marks a shift from Cursor's previous reliance on models like Kimi. Cursor's CEO, Michael Truell, emphasized the model will be a "generally intelligent" assistant, moving beyond just code generation to handle broader engineering tasks like planning, testing, and UI interaction. Simultaneously, Cursor introduced Origin, a "Git-native" code hosting platform designed for AI agents that perform thousands of operations daily, featuring automated conflict resolution for large-scale, AI-generated code changes. The acquisition by SpaceX provides Cursor with significant computational resources. Analysts suggest this combination—Cursor's expertise in reinforcement learning and SpaceX's computing power—could position them strongly in the AI race, potentially challenging established players like GitHub, Claude Code, and Codex.

marsbit06/17 10:28

Cursor's New 1.5T Model Abandons Kimi Foundation, $60 Billion Stock Swap for Cursor, Musk's First Move Targets Microsoft's GitHub

marsbit06/17 10:28

GitHub, Transfixed by AI

On the night of February 9th, GitHub suffered a major outage caused by a simple configuration change—reducing a cache refresh interval from 12 to 2 hours—that triggered a cascade of failures. This was not an isolated event, but part of a broader pattern. In early 2026, GitHub experienced at least 8 major incidents, failing to meet its promised 99.9% availability. These outages stemmed from structural issues: explosive growth in load, tight service coupling, and insufficient protection against abnormal traffic. This unprecedented load is driven by AI Agents. In 2025, GitHub handled ~1 billion commits. By 2026, weekly commits reached 275 million, projecting to ~14 billion for the year—a 14x increase. AI tools like Claude Code now contribute 4.5% of all public repository commits, with weekly submissions surging 25x in just three months. AI-generated pull requests jumped from 4 million to 17 million per month in half a year. Unlike human developers, AI Agents work continuously, generating commits at a scale that overwhelms infrastructure designed for human rhythms. The surge also shattered GitHub's business model. Copilot's flat-rate pricing, based on assisting human developers, became unsustainable as Agentic AI sessions consumed resources worth hundreds of dollars for a few dollars in fees. In response, GitHub imposed usage limits and, by June 1st, shifted to a pay-per-use "AI Credits" system. Facing this new reality, GitHub realized a 10x scaling plan was insufficient. It announced a need to *redesign* its architecture for 30x current scale—decoupling services, adding fault isolation, and improving change management to prevent cascading failures. Other platforms like Stripe and AWS are facing similar challenges with AI Agents. Fundamentally, GitHub is transitioning from a human collaboration platform to an "exhaust pipe" for automated AI workflows. Its detailed post-mortem reports aim to maintain trust during this turbulent rebuild. The February outage was not just a technical glitch, but a signal of the software industry's entry into a new, AI-driven era.

marsbit06/04 10:40

GitHub, Transfixed by AI

marsbit06/04 10:40

GitHub Empire on the Brink of Collapse: Source Code Leak, 18-Year Veteran Leaves, Microsoft Loses 1.5 Billion Developers

GitHub is facing an unprecedented crisis, marked by a massive exodus of developers and severe operational failures. The tipping point came when Mitchell Hashimoto, creator of Ghostty and an 18-year GitHub user, publicly severed ties, citing persistent platform outages that made serious work impossible. This departure highlights a broader pattern of user frustration. The platform's instability has drawn complaints from major corporate clients like Citibank and Intel, forcing Microsoft to issue substantial service credits. A critical incident last month saw an accidentally triggered, unreleased feature cause widespread repository rollbacks, erasing recent code changes and pushing enterprises to migrate. Security has catastrophically breached. In May 2026, hackers infiltrated over 3,800 of GitHub's internal repositories via a poisoned VS Code extension installed by a developer, leading to the attempted sale of core source code for $50,000. This follows the discovery of a critical zero-day vulnerability in March that threatened access to millions of repositories. Internally, GitHub's autonomy has collapsed. After the resignation of CEO Thomas Dohmke in mid-2025, Microsoft eliminated the CEO role, folding GitHub into its CoreAI division under the unpopular leadership of Jay Parikh. This triggered a talent drain, with key executives and engineers leaving. A disruptive migration of GitHub's infrastructure to Azure servers, pushed by CTO Vladimir Fedorov, is blamed for the recurring outages. Competitively, GitHub Copilot is under "existential threat" from superior AI coding tools like Cursor (now owned by SpaceX) and Claude Code, which offer more advanced contextual coding and automation. Ironically, Microsoft's own engineers reportedly preferred Claude Code, forcing management to revoke licenses. Financially, GitHub is a loss leader. Despite Copilot surpassing 4.7 million paid users and $3 billion in annual revenue, the AI inference costs for free services massively outstrip subscription income, hurting Microsoft's cloud margins. The recent shift from a flat fee to a pay-as-you-go model for Copilot has further alienated developers. The core question for Microsoft is whether a centralized code repository remains essential in the AI agent era. The erosion of trust, developer culture, and platform reliability threatens the very ecosystem Microsoft spent decades building.

marsbit05/22 10:52

GitHub Empire on the Brink of Collapse: Source Code Leak, 18-Year Veteran Leaves, Microsoft Loses 1.5 Billion Developers

marsbit05/22 10:52

OpenClaw vs. Hermes: Which One Is Right for You?

Two leading AI agent projects, OpenClaw and Hermes, represent a fundamental divergence in design philosophy rather than just a feature competition. OpenClaw, a GitHub phenomenon, prioritizes user control and customization, offering a powerful, flexible platform for building and orchestrating agents. It boasts a massive ecosystem with over 44,000 skills, extensive model flexibility (supporting Anthropic, OpenAI, and others), and deep integrations across multiple messaging platforms. In contrast, Hermes Agent, developed by Nous Research, champions automation and efficiency. It is designed for lower cost and a lower barrier to entry, learning and improving automatically from user workflows. It runs tasks in isolated environments for security and offers significantly lower token costs out-of-the-box. The choice between them mirrors historical tech divides like Windows vs. Mac. OpenClaw is for users who want maximum control, customization, and don't mind a complex setup. Hermes is the smarter default for those seeking an affordable, easy-to-use agent that learns autonomously. The real competition is not about which is better, but which philosophy—a programmable personal OS or a self-evolving work proxy—better suits the user's needs for control, cost, and ease of use.

marsbit04/26 06:42

OpenClaw vs. Hermes: Which One Is Right for You?

marsbit04/26 06:42

Spending $200 to Buy Stars, Scamming VCs Out of Tens of Millions: The Entire GitHub Fake Star Industry Exposed

A peer-reviewed study from Carnegie Mellon University (CMU) reveals that GitHub hosts approximately 6 million fake Stars, involving 18,600 repositories and 301,000 accounts, with AI/LLM projects being the largest non-malicious category for fake engagement. The fake Star market has exploded, with prices as low as $0.03 per Star. Research shows that venture capital firms, such as Redpoint Ventures, use GitHub Star counts as a key metric for evaluating startups, with median Stars at 2,850 for seed-stage funding. For less than $200, a project can artificially meet this threshold, distorting investment landscape. Over a dozen websites openly sell GitHub Stars, and fake Star activity saw explosive growth in 2024. AI-related repositories were among the most heavily affected. Despite GitHub’s policies against fake engagement, enforcement remains inconsistent: while 90% of flagged repositories were deleted, only 57% of involved accounts were suspended. The report highlights how purchased Stars can manipulate GitHub’s Trending algorithm and influence VC funding decisions, creating a cycle where artificial metrics attract real investment.

marsbit04/21 02:59

Spending $200 to Buy Stars, Scamming VCs Out of Tens of Millions: The Entire GitHub Fake Star Industry Exposed

marsbit04/21 02:59

活动图片

Regulatory Policyright-arrow

Othersright-arrow