Data sources: GitHub Trending bot issues — Mystery406/ai-xiaohongshu-daily #394 (‘2026-10-07’, generated 10-06 UTC) for today’s numbers, compared against happydog-intj/ai-xiaohongshu-daily #537 (‘2026-10-06’) for the previous day. Rain1er/trending #396 and #397 appear in search but returned 404 on fetch and were not used. The primary metric is stars today. Repos with 40k+ total stars, repos holding a past GitHub Trending #1 badge (long-running leaders) and non-AI repos were excluded.
morluto/rea — +2,963 ⭐ today
https://github.com/morluto/rea
Total stars 8,204 · Day-over-day: new entry (not on the previous day’s AI trending list; today’s gain is about 36% of total) · Language: TypeScript · License: MIT
REA (Reverse Engineer Anything) is a CLI and MCP server that lets AI agents investigate apps and binaries down to machine code without source code. It works in three phases, decompile, understand and recreate: it opens an app to recover code, strings and symbols, follows execution paths until the feature logic is clear, then helps re-implement that pattern in your own project. Analysis runs through a modular provider architecture:
- Hopper Disassembler (decompilation, pseudocode, call graphs), Ghidra (read-only analysis on Linux and Windows PE), and native macOS tools (Mach-O, code signatures, Swift demangling)
- Chrome CDP browser inspection, static Electron/ASAR analysis, and V8 Inspector-based JavaScript runtime observation
- Artifact graphs for ZIP, APK, IPA, MSIX and AppX, .NET PE/CLI managed-code analysis, and PTY-based process capture
- 13 investigation workflows, including function dossiers, cross-reference tracing and version-to-version diffing, with reproducible ‘Evidence v2’ records
It plugs into Claude Code, Cursor, Codex, Gemini CLI and Windsurf via MCP (npx rea-agents@latest setup), and it stands out by keeping all analysis local, with dynamic execution off by default and requiring per-call approval. As the ‘MCP plus skills’ pattern for giving coding agents specialist tools takes off, REA is the first popular package that wraps a hard discipline like reverse engineering for agents, which explains its explosive debut this week (its first Trendshift appearance came in Week 40).
Practical use: Useful for understanding undocumented legacy or third-party app behavior, or for letting security teams hand binary audits and cross-version change tracking to an agent (check licensing and legal limits before analyzing third-party software).
Tags: #ReverseEngineering #MCPServer #BinaryAnalysis #Ghidra #CodingAgents #AppSecurity
Excluded today
- earthtojake/text-to-cad (+620, previous day +437): strong momentum, but it holds a GitHub Trending #1 badge (2026-07-20), so it counts as a long-running leader.
- deepseek-ai/DeepGEMM (+363, 8.6k total): an established 2025 repo; the daily gain is only about 4% of its total.
- mattpocock/skills (277.9k), agency-agents (157.7k), claude-mem (97.0k), impeccable (77.6k), i-have-adhd (54.3k), Agent-Reach and OpenMontage: over 40k total stars.
- DuarteSantos8/openGym (+1,433): not AI (a fitness tracker). cloudflare/cloudflare-os (+101): gain too small.
Leave a comment