
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
chatangle-backend
Advanced tools
The backend for Chatangle; a free, decentralized, global chatroom, powered by the IOTA tangle.
The backend for Chatangle; a free, decentralized, global chatroom, powered by the IOTA tangle.
For global installation:
npm install -g chatangle-backend
This will make Chatangle Backend available as the command chatangle-backend.
If you get errors during install about bad permissions, your npm was probably installed as the root user. It is recommended to install npm as non-root, like with nvm. A workaround is to install with the --unsafe-perm flag like so:
npm install -g --unsafe-perm chatangle-backend
You must have a working IOTA Transaction Stream.
If globally installed, example:
chatangle-backend --iotaTransactionStreamIP 123.45.67.890 --iotaTransactionStreamPort 8008 --isIotaTransactionStreamSecured false --webSocketServerPort 8008
If installed locally or running from an IDE:
npm run start -- --iotaTransactionStreamIP 123.45.67.890 --iotaTransactionStreamPort 8008 --isIotaTransactionStreamSecured false --webSocketServerPort 8008
Running in the background, example:
nohup --iotaTransactionStreamIP 123.45.67.890 --iotaTransactionStreamPort 8008 --isIotaTransactionStreamSecured false --webSocketServerPort 8008 >> output.log &
Then tail the logs with
tail -f output.log
If PORT is specified in the environment, this will override webSocketServerPort
These lines of Javascript can be copy-pasted into the Chrome console after starting the server locally to test if the backend is working:
let ws = new WebSocket('ws://chatangleBackendIP:8008')
ws.addEventListener('message', message => {console.log('message', message)})
ws.addEventListener('error', message => {console.error('error', message)})
ws.addEventListener('open', message => {console.log('open', message)})
FAQs
The backend for Chatangle; a free, decentralized, global chatroom, powered by the IOTA tangle.
We found that chatangle-backend demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.