leeway / RADAR

📡 Daily Trend Radar · 2026-10-23

自动追踪全球开发者趋势、最新爆款开源项目与关键安全威胁情报。

生成时间: 2026-10-23 · 数据来源: GitHub API & HackerNews


🔥 GitHub 近期新晋热门开源项目 (Breakout Repos)

项目名 语言 ⭐ Stars 🍴 Forks 简介
Gathin23/cleanyourtv Java 23278 2546 Debloat any Android or Google TV over Wi-Fi and get an Apple TV-style home.
deepseek-ai/DeepInfer Python 19742 2100 DeepInfer: High-performance, large-scale inference framework for DeepSeek models
ly05010419/MacNativeGames C 4412 626 暂无项目描述
jhaizhou-ops/d2r-mobile C 4392 1196 Open-source iOS / macOS compatibility layer for Diablo II: Resurrected with the Reign o...
Arekejoker/qwen21-nsfw-pose-skill Python 3626 649 Qwen-Image 2.1 NSFW/姿势出图 skill:作者级提示词配方 + NSFW LoRA + 136 姿势 VNCCS 人偶控制;适用 Claude Code ...
HeyPuter/everything JavaScript 3564 445 We're rebuilding and open-sourcing the world’s software from scratch.
onehumanbeing/esp32-iphone-agent C 3549 468 Let an AI model use a real iPhone with a $7 ESP32: AirPlay eyes, USB HID hands, any Ope...
simbasjungles/free-my-tv Java 3232 426 A fast, ad-free home screen for Google TV. Open source, built with Claude Code. One but...

🌐 Hacker News 全球极客前沿热议

  1. Quad9 (DNS Resolver) to Exit France
    👍 494 points · 💬 174 条讨论
  2. eMudhra to exit global SSL/TLS certificate business
    👍 676 points · 💬 487 条讨论
  3. Nvidia OpenShell
    👍 53 points · 💬 20 条讨论
  4. Show HN: Run full iOS 16.5 firmware on Android Devices
    👍 155 points · 💬 53 条讨论
  5. Getting ready to operate GNU Taler in Germany
    👍 87 points · 💬 29 条讨论
  6. What's Getting Pwned
    👍 230 points · 💬 121 条讨论
  7. What Is Gridifcation
    👍 293 points · 💬 136 条讨论
  8. Jailbreaking the Switch 2
    👍 560 points · 💬 202 条讨论

🛡️ 最新高危与严重漏洞告警 (Security Advisories)

漏洞编号 严重等级 关联 CVE 简要描述
GHSA-673q-mjm6-r5xr 🔴 CRITICAL N/A Next.js: Unauthenticated Remote Code Execution in use cache functions returning typed arrays
GHSA-cg2g-xh64-v4q7 🔴 CRITICAL N/A DOMPurify SAFE_FOR_TEMPLATES bypass: split template expressions survive in attached shadow root content on DOM output modes
GHSA-v9pv-5gc8-w2m6 🔴 CRITICAL CVE-2026-96639 Pillow multi-frame loaders can reuse stale native image storage after mode transitions
GHSA-mchm-gjx6-7h55 🔴 CRITICAL CVE-2026-114139 Sentry-Javascript: Middleware Bypass when using Tunnel route
GHSA-2464-fhr4-w9xw 🔴 CRITICAL N/A Next.js: Unauthenticated Remote Code Execution in Image Optimization API when SVG files are used
GHSA-9v8h-qqgm-4m35 🔴 CRITICAL CVE-2026-111497 A buffer overflow vulnerability in the Brotli decoder (c/dec/decode.c) in Google Brotli versions...

本简报由 GitHub Actions 自动化定时生成并归档。