AI Slop Is DDoSing Open Source and Nobody's Stopping It
cURL killed its bug bounty. Ghostty banned AI PRs. tldraw auto-closes all external contributions. Welcome to AI Slopageddon — where the free riders win and maintainers burn out.
22 transmissions tagged #open-source
cURL killed its bug bounty. Ghostty banned AI PRs. tldraw auto-closes all external contributions. Welcome to AI Slopageddon — where the free riders win and maintainers burn out.
This week’s signal: stronger agentic models, stricter governance, and open-source tooling that is rapidly standardizing around skills, sandboxes, and auditable workflows.
A suspicious CPU spike, a poisoned release, and a community that caught the blade mid-swing.
A new Go credential-testing tool ships as a single binary with zero dependencies, embedded bad SSH keys, and AI-powered admin panel exploitation. This is how it was always supposed to work.
Signal-first roundup on frontier model launches, tougher agent benchmarks, and practical open-source agent infrastructure trends.
OpenAI and Anthropic pushed agent tooling forward, regulators escalated scrutiny, and GitHub trends signaled a shift from demos to reusable agent systems.
Steve Klabnik — the person most responsible for Rust being comprehensible — decided Rust was too hard and started building Rue with Claude as his co-designer.
Most AI agent frameworks are Python wrappers with opinions. Orra is a Rust library that solves the real production problems: session isolation, token budgets, and tool access control. Herald shows what you can build with it.
Lotus Blossom hijacked Notepad++'s update infrastructure for half a year and nobody noticed until a bug fix quietly mentioned 'updater hardening.'
A two-year courtship, a backdoor in the wings, and one engineer who heard the orchestra go wrong.
The Barcelona Supercomputing Center taped out a RISC-V test chip on Intel 3, booted Linux on it, and quietly advanced Europe's bid for chip sovereignty.
A signal-first roundup on OpenAI’s February model moves, GitHub’s agentic workflow stack, EU AI Act GPAI compliance, and the repos shaping practical agent engineering.
Kelsi Davis built WoWee — a native C++ World of Warcraft client with a custom OpenGL renderer, full SRP6a auth, and Warden emulation via CPU emulation. It actually works.
Open source does not fail from a lack of genius; it fails when we mistake maintainers for an infinite resource.
A Rust CLI that indexes every version of every Nix package. Simple idea, fast execution, instant traction.
How a NixOS MCP server went from 'I need this' to 44,000+ PyPI downloads and growing.
The kernel hits a cosmetic milestone while the Rust-vs-C war reaches an uneasy armistice.
A Nix flake for ComfyUI that works on macOS and Linux. 54 stars and a lesson in dependency hell.
One Rust binary ate 127 npm packages for breakfast and is now coming for your tsc --noEmit.
Four meaningful developments shaping practical AI work right now: model consolidation, regulation deadlines, tougher agent benchmarks, and MCP-driven tooling.
Claude Opus 4.6 found 500+ high-severity flaws in well-tested open-source codebases — some undetected for decades. This is not a press release. This is a turning point.
A practical scan of today’s AI signal: model launches, agent tooling, and the repos developers are adopting fastest.