This issue covers public repositories created from 2026-10-19 through 2026-10-25 that had attracted substantial attention at collection time. The focus is not to turn attention into a verdict, but to verify each README's concrete capabilities, setup path, and stated boundaries.
What caught people's attention
The list ranges from TV home screens and a GPU kernel module to reverse-engineering prompts, in-place archive extraction, vulnerability validation, trading assistance, and an XNU research bench on an Android phone. Their common ground is not maturity; it is that each README describes a concrete entry point that can be inspected.
By Stars at collection time, pengchujin/aerial-tv ranked first with 5,537 Stars. The Top 10 had about 27.2K Stars in total. Stars are only a public attention snapshot, not a measure of quality, security, or long-term maintenance. The observation window is 2026-10-19 through 2026-10-25, and this is not GitHub's official Trending list.
Top 10 projects
1. pengchujin/aerial-tv
Aerial is a clean Android TV home screen for TVs such as Xiaomi, TCL, Skyworth and Sony, as well as boxes and projectors. It provides an app grid, folders, hide/uninstall actions, HDMI source icons, a control center, 114 Apple TV aerial screensaver videos, photo/clock/local-video screensavers, Bing wallpapers, and phone-based organization through a QR code.
Core functionality: It replaces the TV home screen with an interface focused on the owner's apps rather than ads and recommendation feeds. Apps can be organized with the remote, or sorted, renamed, re-iconed and filed from a phone.
Usage and boundaries: The README links to an APK release and installation instructions. The TV and computer must share a network; the relevant ADB/USB debugging and unknown-source settings must be enabled before installing through ADB. It needs no root, does not modify system apps, and can be restored. The stated target is Android TV 5.0+, while ADB menus vary by TV model and 4K/Dolby Vision playback depends on the TV. MIT licensed.
2. simbasjungles/free-my-tv
Free My TV is an ad-free home screen for Google TV and Android TV, with separate support for LG webOS and Samsung Tizen. It shows trending items from apps the user already has, weather, sunset-based themes, crypto prices, now-playing information and a screensaver; Google TV/Android TV can also use up to 100 imported photos.
Core functionality: It provides an app shelf, hourly trending movie and show cards, weather and market cards, day/night themes, a glass-clock screensaver, and a one-button way back to the factory home screen. Its README's 60 fps/96 MB figures come from one 98-inch TCL Google TV running Android 14.
Usage and boundaries: Google TV/Android TV installation needs Android 8+, a computer on the same Wi-Fi, developer mode and USB debugging. Users can ask an AI coding assistant to install it, or use JDK 17+, Android SDK build-tools 34, platform android-34 and adb to run build.sh, configure a city and TMDB key, then install with ADB. Android 14 may show a Play Protect warning, and Chromecast may require reopening ADB after every restart. It needs no root and does not uninstall the original home screen. MIT licensed.
3. JustAResearcher/gpu-unlock-ada
This Linux kernel module enables an SM speed-select override before the NVIDIA driver loads. The README reports experiments on RTX 4090, RTX 4070 Ti SUPER and RTX 4060 Ti 16GB-class Ada cards. Some matched tests approach doubled FP16/BF16 tensor throughput, but real cuBLAS GEMM gains vary by shape and are not application-wide speedups.
Core functionality: It changes the GPU setup path for selected NVIDIA Ada and legacy device IDs, with a Quick Start, testing scripts, driver-version notes and evidence reports.
Usage and boundaries: It requires Linux, a compatible NVIDIA driver/kernel environment and a supported PCI ID; the README sends new users to QUICKSTART.md. Experimental targets often require explicit opt-in, exact PCI addresses in gpu_unlock.targets=, and are never selected by targets=all. Results come from one or a few cards, while other boards, memory configurations and laptops remain unverified. Altering firmware/driver initialization carries boot, stability and warranty risks. GPL-2.0 licensed.
4. JoasASantos/REA-Prompts
REA-Prompts is a prompt collection for REA (Reverse Engineer Anything), covering feature tracing and evidence gathering for native binaries, firmware, kernels, games, Electron apps, APKs and websites. The prompts ask for one focused feature at a time and for confirmed facts, inferences and unknowns to be separated.
Core functionality: The repository contains 26 topic-based skill packs, a consolidated system_prompt.md, and Python tools that rebuild the skills and system prompt from the README. Examples trace a CSV export button to a file write, map program entry points and dependencies, and attach file/function/address evidence to conclusions.
Usage and boundaries: On macOS/Linux, run setup.sh with automatic detection or a selected target such as hermes, claude-code, codex or all; on Windows, run setup.bat. Users can also paste system_prompt.md into an agent or copy an individual SKILL.md. This is a prompt and build-script collection, not a standalone reverse-engineering engine; results still depend on REA, the agent, the target software and authorization. MIT licensed.
5. EthanArbuckle/fairplay-decrypt
FairPlay decrypt is a pure-Python IPA decryptor. It uses a 16-byte credential belonging to the account that owns the IPA, supports version-3/version-5 SUPF, 440/448-byte SINF priv records and encrypted arm64 Mach-O slices, and clears cryptid.
Core functionality: It derives page keys from an IPA's SINF/SUPF records and writes a decrypted IPA. The repository also contains a credential-retrieval tool that obtains credential.bin from a supported jailbroken device.
Usage and boundaries: On macOS/Linux with Python 3.9+, create a virtual environment, install requirements.txt, and run python decrypt.py input.ipa output.ipa --credential credential.bin. Without the option it reads ./credential.bin, and the output path must not already exist. Building the macOS credential-retrieval bundle also needs Xcode and ldid. The README explicitly limits the credential to the account that owns each IPA; no standard open-source license is declared, so reuse needs separate permission.
6. wesbos/3d-model-anything
3D Model Anything uses an iPhone room scan's geometry and photographs with an AI coding agent to build an editable Three.js scene. The repository includes an iPhone app, a Three.js viewer, a scan-to-threejs agent skill and an office demo. The README stresses that this is an iterative reconstruction workflow, not a one-click scan-to-perfect-model converter, and that the current focus is rooms and interiors.
Core functionality: The viewer offers dollhouse, walking, overhead, wireframe and knolling views. Users can scan a space, export a session through the system share sheet into data/captures-in/<room>/, and use the skill to guide measurement, modeling and matched-camera visual comparison.
Usage and boundaries: The viewer needs Node.js 22.12+; run npm ci and npm run dev, then open localhost:5188, or use build/preview. Custom scanning needs a LiDAR-equipped iPhone/iPad; non-LiDAR devices can import and review scans. The demo does not distribute the original scans and photo collections, so Scan/Overlay are disabled there; an App Store release should not be assumed available. No standard open-source license is declared.
7. xevrion/hatchzip
HatchZip is a desktop and command-line archive extractor for Windows, macOS and Linux. It supports ZIP, 7z, RAR, tar and split archives, extracting from the end and shortening the archive as files hatch so the released space can be reused. It targets cases where a disk cannot hold both the archive and a full extracted copy.
Core functionality: The README's 180 GB game archive example needs about 380 GB with traditional tools but only a little over 200 GB with HatchZip. It also provides a latest-release download, CLI, man page and shell completions.
Usage and boundaries: Download the desktop build from hatchzip.dev, or run the Linux/macOS installer and its Windows PowerShell counterpart for the CLI. The installers are per-user, require no administrator rights, and check the published SHA-256; the README also recommends gh attestation verify for build provenance. Because the tool modifies the archive itself, back it up first and confirm the format, disk space and permissions. MIT or Apache-2.0 licensed.
8. ikow/php2shell-poc
php2shell is a PHP pre-auth RCE validation and detection toolkit for CVE-2026-109618 and CVE-2026-109619 as described in its README. It documents attack chains involving session.upload_progress, the Zend OOM bailout and stale FPM state, and supplies Suricata/Snort, Sigma, ModSecurity and OpenResty Lua detection rules.
Core functionality: It reproduces five attack chains in a lab, provides IDS/WAF/SIEM rules and suggests blocking PHP_SESSION_UPLOAD_PROGRESS in multipart POST bodies as the fastest mitigation. The README lists affected and fixed PHP versions and links to the upstream patch.
Usage and boundaries: Its Quick Start uses Docker Compose under lab to start PHP-FPM, nginx and Apache mod_php, then uses Python verification scripts against local lab ports; it also shows an exploit-chain command. Run it only in an isolated, authorized lab and never point the PoC at a third-party system. Production remediation should follow PHP's official security advisories and upgrade paths. MIT licensed.
9. Jakeschincariol/day-trader-skill
Day Trader skill is a set of Claude skills for intraday trading: chart scanning, news monitoring, entry timing, stop/target planning, risk checks, broker confirmation and end-of-day alerts. It reads free public data from Yahoo Finance, Nasdaq Trader, SEC EDGAR and the House Clerk; paper trading is the default and it cannot place an order by itself.
Core functionality: /trader-scanner scans opening-range breakouts, flags and oversold bounces; /trader-news tracks news; /trader-entry and /trader-exit support timing; /trader-risk returns PASS/BLOCK against loss, trade-count, reward/risk, position-size and cash limits; /trader-broker requires the user's confirmation before calling a broker connector, with an Alpaca paper account by default.
Usage and boundaries: In Claude, paste the repository URL and use install skill; it can also be installed as a Claude Code plugin, or its trader-* folders can be copied into global or project .claude/skills/. It needs Python 3.8+ and normally no pip install; SEC tools require a name and email in trader/config.json or SEC_USER_AGENT. The README says no skill can place an order independently, but market data, model judgments and broker connections remain risky and are not a profit guarantee. MIT licensed.
10. oosexgang/hackios-xnu-kernel
HakiOS runs open-source XNU 8796.121.2, a custom boot loader and custom drivers on a Qualcomm Android phone, and can run the iOS 16.5 user space in Linux PC QEMU virt/aarch64. Its first target is the POCO X5 Pro 5G with Snapdragon 778G. It uses fastboot boot to place the loader in RAM rather than flashing the system, and a reboot returns the phone to Android, so the README calls it a research bench rather than a ROM.
Core functionality: The README lists a working lock screen, home screen, Control Center, gestures, touch, CPU, Adreno OpenGL ES, audio, Wi-Fi, camera, Sileo/Procursus and SSH, while explicitly marking cellular data, Bluetooth, charging, Metal and Apple-account integration as unfinished.
Usage and boundaries: Building fetches XNU sources from Apple's GitHub and runs xnu/apply.sh, xnu-deps/setup.sh and xnu-build.sh. The system image is built locally from an iOS 16.5 IPSW downloaded from Apple's public servers; phone firmware comes from the user's own device. The repository does not contain iOS files, vendor firmware, keys, certificates or activation materials. Build dependencies include Linux/theos or macOS Xcode/cctools and the SDK; another Qualcomm phone requires a new device directory. The XNU changes are marked APSL 2.0, while the repository does not declare one uniform standard license.
How to read this list
This list compares only public repositories created during the previous complete calendar week. Stars, forks, issues/PRs and languages are collection-time snapshots. They can suggest attention and adoption cost, but cannot replace code review, dependency review, license checks or security testing. I read the public READMEs only; no listed repository code was cloned, installed or executed.
Source: GitHub Search API · Collected 2026-10-26 (Asia/Singapore)