Pythagora-io/gpt-pilot
The first real AI developer
From the publisher
README & documentation
Source previewRead the project’s overview, installation instructions and usage examples. The original README is the source of truth.
What happened. On 2025-08-24, a malicious commit (065ee8eb, message "Revert 'Implemented weekend discount'") was pushed to this repository, disguised as a routine revert. It was publicly reported on 2026-06-08 by an external security researcher, and the malicious files were removed on 2026-06-11. What it did. The commit added a hidden loader (core/telemetry/hooks.py) that started automatically whenever the program ran (wired in through core/telemetry/init.py). That loader silently downloaded the Bun JavaScript runtime and used it to execute an obfuscated payload (core/telemetry/runtime.bin). The payload is a Shai-Hulud-class supply-chain worm: it harvests credentials and secrets from the machine (cloud/AWS keys, GitHub and npm tokens, SSH keys, and similar) and can use the stolen access to spread to other projects. What this means for you. The code only executed if GPT Pilot was actually run — simply having a copy you never ran is not affected. If you cloned and ran GPT Pilot from…
Read the full README ↗ · Preview checked 2026-10-31T22:39:27.001Z
Inside the original README — Document outline
- 🔒 Security notice
- 🧑✈️ GPT PILOT 🧑✈️
- GPT Pilot doesn't just generate code, it builds apps!
- Visit Pythagora.ai for more info
- 👉 Examples of apps written by GPT Pilot 👈
- 🔌 Requirements
- 🚦How to start using gpt-pilot?
- If you're new to GPT Pilot:
- 🔎 Examples
- PostgreSQL support
- 🧑💻️ CLI arguments
- List created projects (apps)
Headings are captured from the source. Links open the publisher’s document, not a locally hosted copy.
Links from the README
References supplied by the publisher, not independently verified endorsements. Check the destination before downloading files or entering credentials.
Documentation belongs to its respective authors. Reported project/model license: Other. A listing is not a grant of reuse or training rights. Confirm the document’s own terms at the source.
What this repository does
The first real AI developer
Repository facts
- Owner
- Pythagora-io
- Primary language
- Python
- Stars
- 33,649
- Forks
- 3,453
- Open issues + pull requests
- 257
- License
- Other
- Archived
- No
- Default branch
- main
- Created
- 2023-08-16T11:56:07.000Z
- Last push
- 2026-06-18T18:38:25.000Z
Topics and intended use
Owner-supplied topics: ai, codegen, coding-assistant, developer-tools, gpt-4, research-project
Review the README for scope, installation, examples and limitations. We do not run repository code or certify it.
Evaluate before installing
Review licensing and dependencies, inspect recent commits and unresolved issues, and test in an isolated environment before production use. Stars and forks alone cannot answer these questions.
Source and freshness
Source: GitHub. Metadata observed 2026-11-01T12:19:46.836Z. Daily imports are snapshots, not real-time monitoring.
Popularity and source listings do not establish security, suitability, licensing rights or benchmark performance.
Related repositories
EbookFoundation/free-programming-books
donnemartin/system-design-primer