
Research
/Security News
Laravel Lang Compromised with RCE Backdoor Across 700+ Versions
Laravel Lang packages were compromised with an RCE backdoor across hundreds of versions, exposing cloud, CI/CD, and developer secrets.
@zxsz/ai-chat
Advanced tools
pnpm install
pnpm run dev
pnpm run build
# 在sz root目录
pnpm link xx/xx/ai-chat
// 用户信息,避免使用admin,多人同时在线会导致冲突
登录sz用户,获取token和id
修改package.json中版本号
pnpm run build
npm publish
pnpm add @zxsz/ai-chat
import '@zxsz/ai-chat/dist/index.css';
import { ChatIndex } from '@zxsz/ai-chat'
| 属性名 | 类型 | 默认 | 备注 |
|---|---|---|---|
| userId | string | '' | 用户id |
| userName | string | '' | 用户名称 |
| userToken | string | '' | 用户token |
| aiChatTitle | string | '' | 聊天标题 |
| aiChatPrefix | string | '' | 聊天接口代理前缀 |
| fileOptions.maxSize | number | 100 * 1024 * 1024 | 文件上传最大大小 |
| fileOptions.maxCount | number | 5 | 文件上传最大数量 |
| fileOptions.uploadFn | function | 文件上传函数,参数为文件列表,返回promise,结果{url: ''} |
<!-- 聊天标题 -->
<template #chat-title></template>
<!-- 聊天快捷指令 -->
<template #chat-prompts></template>
// 手动发送消息
manualSend(message)
FAQs
## 本地开发
The npm package @zxsz/ai-chat receives a total of 34 weekly downloads. As such, @zxsz/ai-chat popularity was classified as not popular.
We found that @zxsz/ai-chat demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
Laravel Lang packages were compromised with an RCE backdoor across hundreds of versions, exposing cloud, CI/CD, and developer secrets.

Security News
Socket found a malicious postinstall hook across 700+ GitHub repos, including PHP packages on Packagist and Node.js project repositories.

Security News
Vibe coding at scale is reshaping how packages are created, contributed, and selected across the software supply chain