
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
barechat-cli
Advanced tools
Anonymous chat anywhere with commandline
| project | version |
|---|---|
| terminal (this) | |
| web |
Need bare runtime installed through npm. Could install globally using:
npm i -g bare
Could install with command npm i -g barechat or run directly with npx barechat.
To test this chat app, in one terminal run:
> npx barechat
[info] Created new chat room: a1b2c35fbeb452bc900c5a1c00306e52319a3159317312f54fe5a246d634f51a
In another terminal use the hashcode received from the first terminal's output:
> npx barechat a1b2c35fbeb452bc900c5a1c00306e52319a3159317312f54fe5a246d634f51a
[info] Joined chat room a1b2c35fbeb452bc900c5a1c00306e52319a3159317312f54fe5a246d634f51a
By anouncing the hashcode somewhere you can chat anonymously.
And its fully compatible to chat with barechat-web
If you want to record the log of this chat, can add --store argument to save chat into a text file.
# Store logs in default file (./barechat.txt)
npx barechat --store
# Store logs in specific file
npx barechat --store /tmp/chatlog.txt
This package is part of the BareChat monorepo. See the root README for development setup instructions.
# From the packages/cli directory
npm run dev
# Or from the root directory
bun run cli:start
npm run doc
To make varient chat experience, you can also import barechat/lib/chat-core in your project.
import { getBackend } from 'barechat/lib/chat-core'
const {
swarm,
getMemberId,
createRoom,
joinRoom,
sendMessage
} = getBackend()
Read chat-core API in API doc
chat-coreMIT
FAQs
Anonymous chat anywhere with commandline - CLI Package
We found that barechat-cli demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.