Data shows public AI repos may be quietly becoming a supply chain risk

Comments (1)

ersatz_username · 1d ago

We analyzed over 1.8 million Hugging Face model repositories and found widespread licensing ambiguity, risky serialization formats, and subtle file-level inconsistencies—including drift between declared and actual artifact content. Even among the most-downloaded models, a surprising number are missing licenses or contain flagged files. Curious how others are thinking about model integrity and compliance in production.

LLM Inevitabilism (tomrenner.com)

Do not download the app, use the website (idiallo.com)

Kiro: A new agentic IDE (kiro.dev)

CARA – High precision robot dog using rope (aaedmusa.com)

Linux Reaches 5% Desktop Market Share in USA (ostechnix.com)

Show HN: Tinder but it's only pictures of my wife and I can only swipe right (trytender.app)

Valve confirms credit card companies pressured it to delist certain adult games (pcgamer.com)

Hyatt Hotels are using algorithmic Rest “smoking detectors” (twitter.com)

Global hack on Microsoft Sharepoint hits U.S., state agencies, researchers say (washingtonpost.com)

How to Firefox (kau.sh)

Reflections on OpenAI (calv.info)

Qwen3-Coder: Agentic coding in the world (qwenlm.github.io)

AI overviews cause massive drop in search clicks (arstechnica.com)

Graphene OS: a security-enhanced Android build (lwn.net)

Ukrainian hackers destroyed the IT infrastructure of Russian drone manufacturer (prm.ua)

ChatGPT agent: bridging research and action (openai.com)

It's time for modern CSS to kill the SPA (jonoalderson.com)

Mistral Releases Deep Research, Voice, Projects in Le Chat (mistral.ai)

Cops say criminals use a Google Pixel with GrapheneOS – I say that's freedom (androidauthority.com)

Windsurf employee #2: I was given a payout of only 1% what my shares where worth (twitter.com)

The United States withdraws from UNESCO (state.gov)

XMLUI (blog.jonudell.net)

TrackWeight: Turn your MacBook's trackpad into a digital weighing scale (github.com)

Show HN: Shoggoth Mini – A soft tentacle robot powered by GPT-4o and RL (matthieulc.com)

My Self-Hosting Setup (codecaptured.com)

Ozzy Osbourne has died (bbc.co.uk)

Coding with LLMs in the summer of 2025 – an update (antirez.com)

Oakland cops gave ICE license plate data; SFPD also illegally shared with feds (sfstandard.com)

Cloudflare 1.1.1.1 Incident on July 14, 2025 (blog.cloudflare.com)

Death by AI (davebarry.substack.com)

You can now disable all AI features in Zed (zed.dev)

New colors without shooting lasers into your eyes (dynomight.net)

Steam, Itch.io are pulling ‘porn’ games. Critics say it's a slippery slope (wired.com)

Complete silence is always hallucinated as "ترجمة نانسي قنقر" in Arabic (github.com)

UK backing down on Apple encryption backdoor after pressure from US (arstechnica.com)

Ask HN: Is it time to fork HN into AI/LLM and "Everything else/other?"

Apple's MLX adding CUDA support (github.com)

Data brokers are selling flight information to CBP and ICE (eff.org)

Gemini with Deep Think achieves gold-medal standard at the IMO (deepmind.google)

AccountingBench: Evaluating LLMs on real long-horizon business tasks (accounting.penrose.com)

Nobody knows how to build with AI yet (worksonmymachine.substack.com)

Ex-Waymo engineers launch Bedrock Robotics to automate construction (techcrunch.com)

Electric cars produce less brake dust pollution than combustion-engine cars (modernengineeringmarvels.com)

Women dating safety app 'Tea' breached, users' IDs posted to 4chan (404media.co)

Uv: Running a script with dependencies (docs.astral.sh)

What went wrong inside recalled Anker PowerCore 10000 power banks? (lumafield.com)

Cognition (Devin AI) to Acquire Windsurf (cognition.ai)

A 14kb page can load much faster than a 15kb page (2022) (endtimes.dev)

OpenAI claims gold-medal performance at IMO 2025 (twitter.com)

I'm switching to Python and actually liking it (cesarsotovalero.net)

Data shows public AI repos may be quietly becoming a supply chain risk

Comments (1)