
Research
/Security News
CanisterWorm: npm Publisher Compromise Deploys Backdoor Across 29+ Packages
The worm-enabled campaign hit @emilgroup and @teale.io, then used an ICP canister to deliver follow-on payloads.
@howaboua/opencode-chat
Advanced tools
Chatifier plugin for OpenCode - Adds chat-optimized tools and semantic search
A conversational coding assistant plugin for OpenCode with semantic code search.
Chatifier transforms OpenCode into a more conversational experience with two specialized agents and local semantic search.
| Agent | Purpose |
|---|---|
| Just Chat | Quick questions, web research, semantic search, memory |
| Tool Chat | Full toolkit with files, semantic search, and memory |
.opencode/skill/Add to your opencode.json:
{
"plugin": ["@howaboua/opencode-chat"]
}
OpenCode automatically installs the plugin on next launch.
{
"plugin": ["@howaboua/opencode-chat@0.1.3"]
}
For new projects or directories with fewer than 100 files, just launch OpenCode. The plugin automatically:
.opencode/chat/models/)For directories with 100+ files (Obsidian vaults, large codebases, etc.), you MUST run setup manually before launching OpenCode. Otherwise, the plugin will skip indexing to avoid blocking startup.
cd your-project
# Download the embedding model first
npx opencode-chat-download-model
# Index your files (may take several minutes for large directories)
npx opencode-chat-semantic-index --mode full
After this one-time setup, OpenCode will launch normally and only re-index changed files.
Use the agent selector in OpenCode to switch between:
Ask natural language questions:
The assistant searches by meaning using local embeddings - no API calls, fully private.
Tell the assistant to remember things:
Memories persist in AGENTS.md and apply to future sessions.
For multi-step tasks, the assistant creates and tracks a todo list automatically. The list persists in todo.md and is removed when all tasks complete.
.opencode/chat/semantic.sqliteMIT
FAQs
Chatifier plugin for OpenCode - Adds chat-optimized tools and semantic search
The npm package @howaboua/opencode-chat receives a total of 1 weekly downloads. As such, @howaboua/opencode-chat popularity was classified as not popular.
We found that @howaboua/opencode-chat demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
The worm-enabled campaign hit @emilgroup and @teale.io, then used an ICP canister to deliver follow-on payloads.

Research
/Security News
Attackers compromised Trivy GitHub Actions by force-updating tags to deliver malware, exposing CI/CD secrets across affected pipelines.

Security News
ENISA’s new package manager advisory outlines the dependency security practices companies will need to demonstrate as the EU’s Cyber Resilience Act begins enforcing software supply chain requirements.