
Research
/Security News
10 npm Typosquatted Packages Deploy Multi-Stage Credential Harvester
Socket researchers found 10 typosquatted npm packages that auto-run on install, show fake CAPTCHAs, fingerprint by IP, and deploy a credential stealer.
@buildshipapp/chat-widget
Advanced tools
A chat widget that can be paired with BuildShip workflows built using the OpenAI Assistant.
A chat widget built to work in tandem with your own custom BuildShip workflow that you can plug in anywhere on your website. Built by the Rowy team.
Load the widget on your page and configure it.
<script>
window.addEventListener("load", () => {
window.buildShipChatWidget.config.widgetTitle = "Chatbot";
window.buildShipChatWidget.config.greetingMessage =
"Hello! How may I help you today?";
<!-- ...other properties, learn more in the 'Config Properties' section below -->
});
</script>
Set a button to open the widget:
<button data-buildship-chat-widget-button>Beep Boop</button>
The widget is built to work with your custom BuildShip workflow. You can connect the widget to your workflow by setting the window.buildShipChatWidget.config.url property to the workflow's endpoint.
The widget will make a POST request to this URL. The request body will be an object containing the user's message and other data for the workflow to make use of, like so:
{
"message": "The user's message",
"threadId": "A unique identifier for the conversation (learn more below)",
"timestamp": "The timestamp of when the POST request was initiated"
...Other miscellaneous user data (learn more in the 'Config Properties' section below)
}
You can learn more about each of the properties in the next section.
The widget will expect a response from the endpoint in the form of a JSON object containing the workflow's response (message) and the thread ID (threadId), like so:
{
"message": "The bot's response",
"threadId": "The unique identifier for the conversation (learn more below)"
}
The widget can be customized by editing the properties present in the window.buildShipChatWidget.config object. The following properties can be set:
window.buildShipChatWidget.config.url (required)The URL of the endpoint to which the widget will make a POST request when the user sends a message. The endpoint should expect a JSON object in the request body and should respond with a JSON object containing the bot's response and the thread ID (as described above).
window.buildShipChatWidget.config.threadId (optional)A unique identifier for the conversation. This can be used to maintain the context of the conversation across multiple messages/sessions.
If not set, the widget will generate a random thread ID for the first user message and use that for the rest of the conversation until the script remains loaded -- for example, the thread ID will be discarded if the page is refreshed.
window.buildShipChatWidget.config.user (optional)An object containing the user's data. This can be used to send the user's name, email, or any other data that the workflow might need. Example:
window.buildShipChatWidget.config.user = {
name: "Some User",
email: "user@email.com",
// ...Other user data
};
window.buildShipChatWidget.config.widgetTitle (optional)The title of the widget. This will be displayed at the top of the widget.
Defaults to Chatbot.
window.buildShipChatWidget.config.greetingMessage (optional)The message that will be displayed (as though it were sent by the system) when the widget is first opened.
Defaults to not displaying any greeting message.
window.buildShipChatWidget.config.disableErrorAlert (optional)Disables error alerts if no URL is set, if the request fails, etc.
Defaults to false.
window.buildShipChatWidget.config.closeOnOutsideClick (optional)Closes the widget when the user clicks outside of the widget body. If not set to false, you will need to use the close() method (provided in the window.buildShipChatWidget object) to be able to close the widget programmatically (for example, by attaching it to a button).
Defaults to true.
When the script is loaded, it looks for any elements with the data-buildship-chat-widget-button attribute and opens the widget when any of those elements are clicked.
In addition to the config object, the window.buildShipChatWidget object also exposes the open() & close() methods, which can be called directly.
The open() method accepts the click event, and uses event.target to compute the widget's position using Floating UI.
FAQs
A chat widget that can be paired with BuildShip workflows built using the Assistant API.
The npm package @buildshipapp/chat-widget receives a total of 49 weekly downloads. As such, @buildshipapp/chat-widget popularity was classified as not popular.
We found that @buildshipapp/chat-widget demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
Socket researchers found 10 typosquatted npm packages that auto-run on install, show fake CAPTCHAs, fingerprint by IP, and deploy a credential stealer.

Product
Socket Firewall Enterprise is now available with flexible deployment, configurable policies, and expanded language support.

Security News
Open source dashboard CNAPulse tracks CVE Numbering Authorities’ publishing activity, highlighting trends and transparency across the CVE ecosystem.