# GitHub clones spreading ZIP trojans & Fractal kernel reveals Apple speculation - Hacker News (Jun 19, 2026)

Page: https://stenobird.com/podcast/the-automated-daily-6466996/github-clones-spreading-zip-trojans-fractal-kernel-reveals-apple-speculation-hacker-news-jun-19-2026
Text version: https://stenobird.com/podcast/the-automated-daily-6466996/github-clones-spreading-zip-trojans-fractal-kernel-reveals-apple-speculation-hacker-news-jun-19-2026.md
Podcast: [The Automated Daily](https://stenobird.com/podcast/the-automated-daily-6466996)
Published: 2026-06-19T12:14:46+00:00
Episode link: https://theautomateddaily.com/episodes/2026-06-19-github-clones-spreading-zip-trojans-fractal-kernel-reveals-apple-speculation
Audio file: https://dts.podtrac.com/redirect.mp3/cdn.theautomateddaily.com/audio/hn/2026-06-19/en/episode.mp3
Processing state: not_requested
JSON: https://stenobird.com/v1/public/podcasts/the-automated-daily-6466996/episodes/github-clones-spreading-zip-trojans-fractal-kernel-reveals-apple-speculation-hacker-news-jun-19-2026
Duration seconds: 491

## Resource

Please support this podcast by checking out our sponsors: - SurveyMonkey, Using AI to surface insights faster and reduce manual analysis time - https://get.surveymonkey.com/tad - Consensus: AI for Research. Get a free month - https://get.consensus.app/automated_daily - KrispCall: Agentic Cloud Telephony - https://try.krispcall.com/tad Support The Automated Daily directly: Buy me a coffee: https://buymeacoffee.com/theautomateddaily Today's topics: GitHub clones spreading ZIP trojans - A large-scale malware campaign used GitHub repo clones and SEO to push ZIP trojans via README links, evading simple URL scanning. Keywords: GitHub, malware, trojan ZIP, repo cloning, search indexing, GH Archive. Fractal kernel reveals Apple speculation - MIT CSAIL’s Fractal kernel reduces OS noise to study microarchitectural behavior on Apple M1, surfacing new evidence of “Phantom” speculation and side-channel-relevant instruction fetch. Keywords: Apple Silicon, speculative execution, side channel, Spectre, IEEE S&P. Java Valhalla value objects preview - Project Valhalla’s first major feature, JEP 401, is landing in mainline OpenJDK for a JDK 28 preview, introducing value objects that drop identity to unlock flatter, more efficient memory layouts. Keywords: Java, OpenJDK, Valhalla, value classes, GC pressure, cache locality. Raku Foundation and EU compliance - The Raku community formed The Raku Foundation as a Dutch Stichting to improve governance, fundraising, and preparedness for the EU Cyber Resilience Act’s open-source steward expectations. Keywords: Raku, open source governance, Stichting, CRA, vulnerability reporting. DuckDB speed from in-process design - A DuckDB internals write-up connects its real-world speed to design choices made before execution—especially in-process deployment…

## Actions

- request_transcript: `POST https://stenobird.com/v1/public/podcasts/the-automated-daily-6466996/episodes/github-clones-spreading-zip-trojans-fractal-kernel-reveals-apple-speculation-hacker-news-jun-19-2026/transcription-requests` — Idempotently request low-priority transcript generation for this episode.
- read_markdown: `GET https://stenobird.com/podcast/the-automated-daily-6466996/github-clones-spreading-zip-trojans-fractal-kernel-reveals-apple-speculation-hacker-news-jun-19-2026.md` — Read the agent-friendly Markdown representation of this episode resource.

A page view does not enqueue transcription. Agents should invoke `request_transcript` explicitly when they need this episode processed.

## Transcript

Full transcripts are not published on public pages unless there is a clear rights basis.