
Research
/Security News
npm Author Qix Compromised via Phishing Email in Major Supply Chain Attack
npm author Qix’s account was compromised, with malicious versions of popular packages like chalk-template, color-convert, and strip-ansi published.
What is it? Blether is a web IRC client that you host on your own server. It is a fork of The Lounge because I like to get stuff in quicker than it generally goes into Shout, but that means that it might be a little less stable, and things might break.
What features does it have?
Why the fork?
We felt that the original Shout project "stagnated" a little because its original author wanted it to remain his pet project (which is a perfectly fine thing!).
A bunch of people, excited about doing things a bit differently than the upstream project forked it under a new name: “The Lounge”.
This fork aims to be community managed, meaning that the decisions are taken in a collegial fashion, and that a bunch of maintainers should be able to make the review process quicker and more streamlined.
sudo npm install -g blether
When the install is complete, go ahead and run this in your terminal:
blether --help
For more information, read the Lounge documentation.
To run the app from source, just clone the code and run this in your terminal:
npm install
npm start
You will have to run npm run build
if you change or add anything in
client/js/libs
or client/views.
Available under the MIT License.
Some fonts licensed under SIL OFL and the Apache License.
FAQs
The self-hosted Web IRC client
The npm package blether receives a total of 0 weekly downloads. As such, blether popularity was classified as not popular.
We found that blether demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
/Security News
npm author Qix’s account was compromised, with malicious versions of popular packages like chalk-template, color-convert, and strip-ansi published.
Research
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
Security News
Ruby maintainers from Bundler and rbenv teams are building rv to bring Python uv's speed and unified tooling approach to Ruby development.