Zorv
Autonomous AI CVE Patcher for Node.js & Python
Zorv launched on June 4, 2026 with 6 votes, #2,066 of 22,647 launches that month and more than 75% of that year's launches.
What it does
Hey guys, I wanted to share the launch of my side project: Zorv. What it is: An autonomous security agent that doesn't just alert you about npm/python CVEs—it bumps the package, runs your tests, uses an LLM to write the code fixes for any breaking API changes, and opens a clean PR once tests pass. Why I built it: I got tired of Dependabot PRs sitting in backlogs because a minor/major version bump broke a test and nobody had time to fix it.
Stop manually fixing broken builds caused by dependency upgrades. Zorv autonomously patches Node.js & Python vulnerability alerts, runs tests in a secure sandbox, and uses AI to fix breaking changes before opening a PR.
Standard tools like Dependabot and Renovate are great at finding outdated packages, but they only do half the job. When they bump a major package version: The package API changes, throwing errors and breaking your suite. The PR sits gathering dust, requiring developers to fix manually. Security teams continuously flag unresolved CVE security alerts. Zorv fixes this by acting as an autonomous developer in your CI pipeline. When a package bump breaks your tests, Zorv analyzes the test failure, rewrites the obsolete API usage, verifies the tests pass, and opens a clean, merge-ready Pull Request. Zorv scans your repository using npm audit to extract patchable CVEs and target package versions.…from zorv.openyf.dev
Does a similar job
all alternatives →
Bugster2025 · bugster.dev · ▲419Bugster is a dev-first testing agent that runs UI tests without setup overhead. – Install and authenticate from terminal – Auto-generates an E2E test suite – Run locally or integrate with GitHub When integrated with GitHub: – Executes only relevant tests for each PR – Runs in Vercel preview environment – Comments results directly on the PR Works out of the box with Next.js + Vercel. Would love your feedback → https://www.bugster.dev/
Daemons by Charlie LabsJun 2026 · charlielabs.ai · ▲228For almost two years, we've been developing Charlie, a coding agent that is autonomous, cloud-based, and focused primarily on TypeScript development. During that time, the explosion in growth and development of LLMs and agents has surpassed even our initially very bullish prognosis. When we started Charlie, we were one of the only teams we knew fully relying on agents to build all of our code. We all know how that has gone — the world has caught up, but working with agents hasn't been all kittens and rainbows, especially for fast moving teams. The one thing we've noticed over the last 3…
- RLRunning LLMs in one line of Python without Docker2023 · lepton.ai · ▲68
Hello Hacker News! We're Yangqing, Xiang and JJ from lepton.ai. We are building a platform to run any AI models as easy as writing local code, and to get your favorite models in minutes. It's like container for AI, but without the hassle of actually building a docker image. We built and contributed to some of the world's most popular AI software - PyTorch 1.0, ONNX, Caffe, etcd, Kubernetes, etc. We also managed hundreds of thousands of computers in our previous jobs. And we found that the AI software stack is usually unnecessarily complex - and we want to change that. Imagine if you are a…
PwnScan2025 · pwnscan.com · ▲8For at least a few years (since before COVID), in my circle everbody wants an AI tool that finds vulnerabilities in binaries. I have my reservations about such a tool because of my perception that AI is overhyped, so I decided to build one myself to see how useful it could be (or not). I was actually kinda surprised how well it worked for my collection of binaries with known CVEs. It definitely has false positives and negatives, as any static analysis tool would, but I think its actually somewhat usable. I dont think the results are super actionable, but interesting nonetheless. I still…
AttackerViewFeb 2026 · attackerview.com · ▲13Last week I wrote about building a scanner that writes its own exploits. A cron job runs Claude Code every night, it reads new CVEs, writes proof-of-concept checks, tests them against vulnerable and patched Docker instances, and opens PRs. I review and merge in the morning. That post was about how t
We instrumented Claude Agent SDK using a tiny Rust proxyDec 2025 · laminar.sh · ▲6At Laminar (https://github.com/lmnr-ai/lmnr) we're building open source AI observability platform in Rust. We obsess over instrumentation DX for our Python and TS SDKs and in this new blog we outline how we made the most seamless way of instrumenting recently released claude agent sdk
More ai this month
the category →
Paintings by AI models: programs run through a simulation of oil paint.
AI · 20d ago · stillwet.art
PixVerse R2▲381A real-time world model you can explore and change
AI · 29d ago · world.pixverse.video
Source: Product Hunt launch ↗
Launched alongside, June 2026
the whole month →
Fundraisly▲1,537AI fundraising agent that finds investors and books meetings
AI · Jun 2026 · fundraisly.com
Homebrew 6.0.0▲1,481Today, I’m proud to announce Homebrew 6.0.0. The most significant changes since 5.1.0 are a new tap trust security mechanism, the new faster, smaller, default internal Homebrew JSON API, sandboxing on Linux, better defaults informed by our user survey, many brew bundle improvements, improved performance and initial support for macOS 27 (Golden Gate). Happy to discuss any questions here!
Dev tools · Jun 2026 · brew.sh
Hi HN! I was super frustrated at apps like tiktok and wechat preventing me from saving or downloading the animated gifs, so I made a little tool to turn a screen recording into a slack-sized emoji. Hope you get some value from this!
Life & fun · Jun 2026 · vorpus.github.io
Search 18 years of Hacker News and chart how any topic, tool, or person trended. Overlay terms to compare their rise and fall across 45M posts and comments.
Life & fun · Jun 2026 · hackernewstrends.com