ComfyUI is one of the largest AI projects on GitHub, with more than 142,000 stars, nearly 17,000 forks, and a current Windows release that has already been downloaded well over 100,000 times. A recent security investigation now raises a much less comfortable question about the enormous ecosystem of custom nodes that can be installed around it.

Novig has opened its sports trading API to ordinary account holders, giving retail traders direct access to automated order placement, live market data, positions, fills, and order books without requiring a professional market maker agreement.

PhotoCraft is what happens when someone looks at Adobe Photoshop, looks at the Rust programming language, and apparently decides that sleep is negotiable. The project is an open implementation of a serious layered image editor, written entirely in Rust and designed to open, edit, and save real Photoshop PSD files.

Polymarket US has filed a new fee schedule with the Commodity Futures Trading Commission that effectively eliminates its standard maker rebate for small retail traders. Beginning October 19, 2026, a trader must generate at least $10 million in maker volume during the previous month before receiving any standard maker rebate. Below that threshold, the rebate is zero.

Open WebUI versions 0.8.11 through 0.11.0 were affected, and version 0.11.1 corrected the problem.

CCBaga is a new desktop application for managing multiple Claude identities, preserving local configurations, and checking whether a browser's reported environment agrees with the computer and its network connection.

A new community driver is attempting something macOS users have effectively gone without for years: modern NVIDIA graphics support. NullMoth Systems published its NVIDIA macOS driver on October 7, 2026, targeting Turing and newer GPUs on Intel based Macs and OpenCore systems running macOS 15 Sequoia. The project has already passed roughly 1,700 GitHub stars and 150 forks, while its newest installer and driver packages have recorded hundreds of downloads within their first day

Immich 3.3.1 contains a striking permission problem in its new People cluster group system. A GitHub user reported on October 8, 2026 that a nonadministrator account inside a cluster group could reset facial recognition for the entire group, forcing several hours of recovery afterward

PS5X360 is a new experimental Xbox 360 emulator built specifically for PlayStation 5 homebrew systems. It adapts Xenia Canary to run on Sony hardware with native DualSense controls, PS5 audio output, and Vulkan rendering through RADV. The repository appeared on October 3, 2026, and had reached roughly 154 GitHub stars, 18 forks, and 38 open issues by October 6. Those star numbers are modest compared with some GitHub launches, but the release activity is not: the current versi

Running RemoveMacAI turns off Siri, Writing Tools, Genmoji, Image Playground, the ChatGPT extension, message and email summaries, notification summaries, inline text predictions, Spatial Photos, Photos Clean Up, and Xcode predictive completion. It then asks Apple’s asset service to remove the downloaded model sets associated with those features.

EasyRead is a new desktop application built around a problem that ordinary PDF translators tend to handle poorly: reading a long academic paper after translation without losing the structure of the paper itself. The project appeared on GitHub on September 30, 2026, and had reached roughly 480 stars and 34 forks by the evening of October 1. Its releases for Windows, macOS, and Linux have recorded more than 200 binary downloads across several rapidly issued versions, although t

A security report filed against Ollama describes a server side request forgery vulnerability in the system used to download tensor model layers. The reported flaw appeared in a separate transfer path from the one previously patched for CVE-2026-5530, allowing redirects from a malicious model registry to reach network addresses that Ollama was not supposed to contact. The researcher says the behavior was reproduced against Ollama 0.30.0 in Docker after first reporting it priva

Coucou appeared on GitHub on September 27, 2026, as a small macOS utility with an unusually literal use for the MacBook notch. It places Claude Code session activity, permission requests, questions, and a compact chat interface inside the space surrounding the camera cutout. By the evening of September 30, the repository had reached roughly 1,200 GitHub stars and 150 forks, while the first packaged Mac release had recorded more than 1,300 downloads. Those numbers arrived with

A newly filed GitHub report alleges that Jellyfin contains an argument injection vulnerability involving .strm media shortcut files and its use of FFmpeg and ffprobe. The report was opened on September 30, 2026 and claims the flaw could allow someone with limited control over a Jellyfin media library to cause arbitrary file writes and potentially execute code under the Jellyfin service account.

Max Payne 2 VR appeared publicly on GitHub on September 27, 2026, with a release candidate that rebuilds the 2003 shooter around tracked hands, physical weapons, manual reloading, and PC VR headsets. The project is not a simple camera modification, since much of the interaction that once happened through keyboard and mouse has been reassigned to movement, grip, weapon handling, and body position. Its first three public release files have already recorded more than 2,000 downl

DiPlay is a new Android application that turns compatible Android based car head units into CarPlay receivers without requiring a separate dongle, a jailbreak, a Mac, or an account with a remote authentication service. The software is installed on the car rather than the iPhone, then accepts either a wired USB connection or a wireless CarPlay session from the phone.

OmaPhoto appeared on GitHub on September 26, 2026, with a fairly specific objective: reproduce the editing environment of Compositor on Linux without abandoning Compositor projects at the operating system boundary. Compositor itself arrived earlier this month and has already collected more than 5,800 GitHub stars as a free image editor for macOS.

HaloBattery is a new Windows utility that places the battery level of wireless mice, headsets, controllers, and Bluetooth devices directly in the system tray. Instead of opening Logitech G HUB, Razer Synapse, SteelSeries GG, or several other vendor applications just to check battery percentages, HaloBattery attempts to read those devices directly and display each one as its own tray icon.

BridgeClip is a new desktop app designed to turn long videos into finished short clips without forcing the entire editing process into a cloud service. Give it a podcast, local video file, YouTube link, or public Twitch VOD, and BridgeClip can transcribe the audio, identify promising moments, crop those sections for vertical or standard video, add captions, and render the finished clips on your own computer.