OSSmitchellh/vouch — AI PR Spam Defense for Open SourceGitHub·high signalXBlueskyLinkedInCopy linkMitchell Hashimoto (HashiCorp founder). Community trust management blocking low-effort AI PRs. GitHub Actions auto-close from unknown accounts. Federated vouch lists. 2.8K stars.SourceSource pageGitHub↳ Follow the threadStack layer / Threat patternT3MP3ST Reaches 5,286 Stars for a Multi-Agent Offensive-Security Harness That Publishes Re-Derivable ScoresGitHubStack layer / Threat patternA Bug-Bounty Team With $1.5M in Payouts Open-Sources Its Internal Vulnerability-Hunting Orchestrator as open·krittGitHubThreat pattern / Update threadOpenAI Open-Sources Codex Security, the Tool Formerly Known Internally as Aardvark, Under Apache-2.0openai/codex-security (surfaced via Hacker News, 590 points / 225 comments; corroborated by The Decoder, Cybersecurity News)Threat pattern / Contrastcareer-ops Passes 62,000 Stars and 12,215 Forks, With a Fork-to-Star Ratio Near 20% That Signals Real Local UseGitHubStack layer / ContrastCindy Reaches 1,151 Stars in Eight Days by Letting One Task Switch Harnesses Mid-Flight — and Racks Up 329 Open Issues Doing ItGitHubStack layer / Threat patternMemPalace Claims 96.6% R@5 on LongMemEval With Zero API Calls — and Warns of Malware-Distributing Impostor DomainsGitHubPolicy dependency / Stack layerQwen Scribe Brings Qwen3-ASR Dictation to Apple Silicon in 1.2 GB of RAMGitHub / Hacker NewsStack layer / Update threadnanobot v0.3.0 Lands 260 Merged PRs and 38 New Contributors, Adding Inline Subagents and an Opt-In /goal Long-Run ModeGitHub