
Security News
/Research
Popular node-ipc npm Package Infected with Credential Stealer
Socket detected malicious node-ipc versions with obfuscated stealer/backdoor behavior in a developing npm supply chain attack.
@acong-tech/matchmaker
Advanced tools
Matchmaker client CLI — conversational registration, profile, and partner discovery against the centralized matchmaker service. Use via the `mm` command or the paired `matchmaker` skill.
Agent-first dating platform client. Talk to your own Claude, it fills in your profile and queries other people's profiles on your behalf.
The mm CLI is a thin wrapper around the matchmaker service at
https://matchmaker.agentaily.com. All matching intelligence runs in your
agent; the server only stores profiles and executes restricted read-only
SQL.
npm install -g @acong-tech/matchmaker
mm --help
Requires Node.js ≥ 20 and a vault-like credential store (the vault CLI from
this ecosystem is one; the session token for matchmaker lives under the
matchmaker-user platform).
Pair with the matchmaker skill if you use
Claude Code — that way your agent will pick the right commands from natural
language without you having to learn CLI flags.
# 1. Send a verification code to your phone
mm register 13900000000
# 2. Verify (CLI prints a request_id; enter the 6-digit code you receive by SMS)
mm verify 123456 --request-id 01KPN2HNDF0G0342SHE1ST1XBR
# 3. Fill in your profile (values are normalized server-side)
mm profile set gender f
mm profile set age 28
mm profile set city 杭州
mm profile set tags 徒步,咖啡,爵士
mm profile set bio "看个展就很开心的人"
# 4. Your agent queries other people via restricted SQL
mm query "gender = 'm' AND age BETWEEN 28 AND 35 AND city = '杭州' AND '徒步' = ANY(tags)"
# 5. Messaging (read receipts on by default, toggle via profile flag)
mm send <recipient_user_id> "周末去西湖吗?"
mm inbox [--unread]
mm read <message_id>
mm sent
| Command | What it does |
|---|---|
mm register <phone> | Request an SMS verification code |
mm verify <code> --request-id <id> | Exchange code for a session token |
mm profile set | show | clear | Read / update / clear your profile |
mm query '<where>' [--limit N] [--json] | Restricted read-only SELECT against the profiles table |
mm send <user_id> "<body>" | Send a message to another user |
mm inbox [--unread] | List messages received (newest first) |
mm sent | List messages you sent (with read receipts) |
mm read <message_id> | Mark a message as read (idempotent) |
mm logout | Drop the local session token |
mm delete --confirm | Schedule account deletion (7-day physical purge; re-verifying the same phone within 7 days restores the account) |
mm profile set messaging_read_receipt_enabled false.mm delete: the account soft-deletes immediately,
re-verifying the same phone within the window restores it; after the
window the row is physically removed along with any sessions.MIT © 2026 Hangzhou Acong Intelligent Technology Co., Ltd.
FAQs
Matchmaker client CLI — conversational registration, profile, and partner discovery against the centralized matchmaker service. Use via the `mm` command or the paired `matchmaker` skill.
We found that @acong-tech/matchmaker demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
/Research
Socket detected malicious node-ipc versions with obfuscated stealer/backdoor behavior in a developing npm supply chain attack.

Security News
TeamPCP and BreachForums are promoting a Shai-Hulud supply chain attack contest with a $1,000 prize for the biggest package compromise.

Security News
Packagist urges PHP projects to update Composer after a GitHub token format change exposed some GitHub Actions tokens in CI logs.