1
AI load breaks GitHub – why not other vendors?
AI负载冲击GitHub可靠性骤降，揭示大厂基础设施的差异化应对困境
Article URL: https://blog.pragmaticengineer.com/the-pulse-ai-load-breaks-github/ Comments URL: https://news.ycombinator.com/item?id=48266309 Points: 3…
2
Show HN: Strudel – Generate commit messages via Apple's on-device LLM
用苹果端侧大模型自动生成Git提交信息，本地运行保隐私，开发者效率利器。
Strudel is a small cli tool which uses Apple's on-device LLM to write commit messages for you. To give it a try install it and run it in a git repo wi…
3
Git: Best Practices for Beginners
Git新手的实用入门指南，教你分支管理、提交规范等核心最佳实践，避开常见坑。
Git and GitHub are essential tools for software development, yet many beginners avoid using them properly due to concerns about making mistakes. They …
4
Here’s a beginner-friendly guide to GitHub, especially focused on forks and pull requests, which are the core of real-world collaboration
零基础学会GitHub协作核心——fork和PR，图解开源工作流轻松上手
🚀 GitHub for Beginners (Forks, Pull Requests, and Collaboration) GitHub is where developers store code, collaborate, and contribute to projects . If G…
5
Show HN: Memory for LLM apps that cuts input tokens up to 80% (avg 68%)
GitHub开源项目，让LLM应用拥有长期记忆，同时将输入token平均削减68%，大幅降低API成本。
Article URL: https://github.com/Tem-Degu/streetai-memory Comments URL: https://news.ycombinator.com/item?id=48249509 Points: 1 # Comments: 0
6
What Developers Don’t Say in Interviews—but Show on GitHub
从研究论文看GitHub上的开发者行为，揭示面试中难以言说的真实一面
When I started working on my usability study project with KServe, I interacted with KServe users to understand the challenges they were experiencing w…
7
Tell HN: I'm tired of AI-generated answers
揭开AI答案的沉沦：开发者揭露GitHub讨论区充斥人工智能复读机，真实求助被淹没在无意义回复中。
I found GitHub repositories that were spreading malware. I asked AI what I should do about it, but it gave me nothing useful. So I opened a discussion…
8
CISA Security Leak
CISA承包商在GitHub上意外暴露多个高权限AWS GovCloud账户凭证，安全专家揭露开源仓库风险。
Crazy story : Until this past weekend, a contractor for the Cybersecurity & Infrastructure Security Agency (CISA) maintained a public GitHub repo…
9
A hacker group is poisoning open source code at an unprecedented scale
黑客通过VSCode扩展投毒开源代码，GitHub遭供应链攻击，规模史无前例。
GitHub is just the latest victim of TeamPCP, a gang that has carried out a spree of software supply chain attacks.
10
X-Token: Projection-Guided Cross-Tokenizer Knowledge Distillation
无需辅助组件的投影引导跨分词器知识蒸馏，有效解决词汇不兼容问题。
arXiv:2605.21699v1 Announce Type: cross Abstract: Cross-tokenizer knowledge distillation allows a student model to learn from teachers with incompatib…
11
Building GitHub’s next chapter in accessibility
GitHub发布无障碍新策略，邀你共建包容性开发文化，了解最新进展与参与方式。
Explore our update on GitHub’s accessibility strategy, and learn how you can join us in building a culture of accessibility. The post Building GitHub&…
12
GitHub 被黑，3800个内部仓库外泄：从一枚恶意VS Code扩展说起
从一枚恶意VS Code扩展说起，揭秘GitHub内部3800个仓库泄露的供应链攻击链条，开发者必看的安全警示。
13
Complementing reinforcement learning with SFT through logit averaging in the post training of LLMs
新方法通过logit averaging融合强化学习与监督微调，显著提升LLM后训练的性能和稳定性。
arXiv:2605.20555v1 Announce Type: new Abstract: We introduce a novel method that averages the logits of a frozen reference policy (e.g., SFT) and a tr…
14
GitHub confirms breach of 3,800 repos via malicious VSCode extension
恶意VSCode扩展致GitHub 3800个仓库被入侵，供应链安全警钟再响
Previous thread in sequence: GitHub is investigating unauthorized access to their internal repositories - https://news.ycombinator.com/item?id=4820131…
15
Investigating unauthorized access to GitHub-owned repositories
GitHub首席安全官亲述内部仓库遭非法入侵的完整调查过程
If any impact is discovered, customers will be notified via established incident response and notification channels. The post Investigating unauthoriz…
16
Zero-Secret CI/CD: GitHub Actions + OIDC on AWS (Part 6)
抛弃GitHub Secrets，用OIDC信任实现更安全的零密钥CI/CD部署，附完整AWS配置实例
Zero-Secret CI/CD: GitHub Actions + OIDC on AWS (Part 6) No AWS_ACCESS_KEY_ID in your GitHub secrets. Ever. Here's how OIDC trust works and why it's s…
17
AI Inference Costs: The Wake-Up Call for 2026 and 2027
2026年AI推理成本将飙升，GitHub Copilot率先转向用量计费，企业预算面临调整。
Article URL: https://blog.herlein.com/post/ai-inference-costs-reality-check/ Comments URL: https://news.ycombinator.com/item?id=48211362 Points: 1 # C…
18
LLM: Documentation driven exploration for big codebase
用LLM辅助，以文档为线索高效探索大型代码库的开源工具
Article URL: https://github.com/Anhydrite/doc-torn Comments URL: https://news.ycombinator.com/item?id=48219106 Points: 2 # Comments: 1
19
GitHub confirms 3,800 internal repos stolen through poisoned VS Code extension as supply chain worm hits Microsoft’s Python SDK
GitHub确认3800个内部仓库遭投毒VS Code扩展窃取，针对微软Python SDK的供应链蠕虫正在扩散。
GitHub confirmed on May 20 that a poisoned VS Code extension installed on an employee’s device gave attackers access to roughly 3,800 internal reposit…
20
GitHub 被黑：员工装了一个 VS Code 插件后，3800 个内部仓库泄漏
GitHub 因员工安装恶意 VS Code 插件导致3800个内部仓库泄漏，敲响企业供应链安全警钟。
昨日 GitHub 在 X 上确认：一名员工安装了被植入恶意代码的 VS Code 扩展，导致 GitHub 内部约 3800 个代码仓库遭泄漏。@Appinn 感谢 vlad 的提醒。 从 GitHub 确认的情况来看，一名员工安装了恶意的 VS Code 扩展程序后，其设备被攻破，约有 3800