Top of Hacker News

In today's GitHub Trending: Snipe-IT manages IT assets and licences; Java Design Patterns turns common patterns into runnable examples; LangChain supplies agent-building components; Ghidra is a reverse-engineering framework; MONAI is a healthcare-imaging toolkit.

The common thread is durable infrastructure with a specific audience. Four of the five projects are long-lived repositories; the useful signal is not a new category, but developers returning to tools that make complicated work legible and repeatable.

A coordinated disclosure describes prompt injection in Copilot for Word: a document can hide instructions in white-on-white text, influence a generated report, then cause Copilot to copy those instructions into the output. That output becomes the next carrier when someone uses it as source material.

The uncomfortable shift is from a bad attachment to a poisoned internal artifact. The author says Microsoft reproduced the broader class after multiple mitigations; the immediate defensive rule is to treat external files as untrusted context, not just untrusted downloads.