
Research
/Security News
Weaponizing Discord for Command and Control Across npm, PyPI, and RubyGems.org
Socket researchers uncover how threat actors weaponize Discord across the npm, PyPI, and RubyGems ecosystems to exfiltrate sensitive data.
hexabot-chat-widget
Advanced tools
Hexabot is a solution for creating and managing chatbots across multiple channels, leveraging AI for advanced conversational capabilities. It provides a user-friendly interface for building, training, and deploying chatbots with integrated support for var
The Hexabot Live Chat Widget is a React-based embeddable widget that allows users to integrate real-time chat functionality into their websites. It connects to the Hexabot API and facilitates seamless interaction between end-users and chatbots across multiple channels.
Hexabot is an open-source chatbot / agent solution that allows users to create and manage AI-powered, multi-channel, and multilingual chatbots with ease. If you would like to learn more, please visit the official github repo.
The Hexabot Live Chat Widget is organized into the following directory structure, under src
we have:
src/assets: Static assets like icons, fonts, and images used in the widget.
src/components: Reusable React components that make up the chat widget interface, such as message bubbles, input fields, and buttons.
src/constants: Hard coded values that are used like colors.
src/hooks: Custom React hooks for managing widget state and handling side effects like API calls or real-time events.
src/services: Handles external services, such as communication with the Hexabot API or other third-party integrations.
src/styles: Contains the styling for the widget, including CSS or SCSS files used to define the look and feel of the chat interface.
src/providers: Context providers for managing global state, such as user session, chat messages, and widget configurations.
src/translations: Contains transalation of a couple of strings.
src/types: Defines the typescript interfaces, types, and enums used.
src/utils: Utility functions and helpers used throughout the widget, such as formatting, validations, or data transformations.
/public: Contains static files that are publicly accessible. This includes the main HTML template where the widget is embedded for local development.
To run the widget in development mode, execute the following command at the project root level:
npm run dev:widget
The live chat widget will be accessible at http://localhost:5173.
To build the widget for production, execute the following command at the widget folder level:
npm run build
This will generate a production-ready build in the dist folder.
Once the widget is built, you can easily embed it into any webpage. Here's an example of how to add it to your website:
<script crossorigin src="https://unpkg.com/react@18/umd/react.production.min.js"></script>
<script crossorigin src="https://unpkg.com/react-dom@18/umd/react-dom.production.min.js"></script>
<link rel="stylesheet" href="./style.css">
<script src="<<WIDGET URL>>/hexabot-widget.umd.js"></script>
<div id="hb-chat-widget"></div>
<script>
const el = React.createElement;
const domContainer = document.getElementById('hb-chat-widget');
ReactDOM.render(
el(HexabotWidget, {
apiUrl: 'https://api.yourdomain.com',
channel: 'web-channel',
token: 'token123',
}),
domContainer,
);
</script>
Replace the values in apiUrl and token with your configuration details.
To prevent the website css from conflicting with the chat widget css, we can leverage the shadow dom:
<script crossorigin src="https://cdn.jsdelivr.net/npm/react@18/umd/react.production.min.js"></script>
<script crossorigin src="https://cdn.jsdelivr.net/npm/react-dom@18/umd/react-dom.production.min.js"></script>
<script src="<<WIDGET URL>>/hexabot-widget.umd.js"></script>
<div id="hb-chat-widget"></div>
<script>
// Create the shadow root and attach it to the widget container
const createElement = (tag, props = {}) => Object.assign(document.createElement(tag), props);
const shadowContainer = createElement("div");
document
.getElementById('hb-chat-widget')
.attachShadow({ mode: 'open' })
.append(
shadowContainer,
createElement("link", {
rel: "stylesheet",
href: "<<WIDGET URL>>/style.css"
});
);
// Render the widget inside the shadow root
ReactDOM.render(
React.createElement(HexabotWidget, {
apiUrl: 'https://api.yourdomain.com',
channel: 'web-channel',
token: 'token123',
}),
shadowContainer,
);
</script>
If you would like to use the official widget and benefit from updates automatically, you can consider using the cdn url:
https://cdn.jsdelivr.net/npm/hexabot-chat-widget@2.0.4/dist/
or lastest from major version:
https://cdn.jsdelivr.net/npm/hexabot-chat-widget@2/dist/
JsDelivr uses the package published in the NPM registry : https://www.npmjs.com/package/hexabot-chat-widget
As a proof of concept we developed a Wordpress plugin to embed the chat widget in a Wordpress website : https://github.com/hexastack/hexabot-wordpress-live-chat-widget
You can customize the look and feel of the chat widget by modifying the widget’s scss styles or behavior. The widget allows you to:
We welcome contributions from the community! Whether you want to report a bug, suggest new features, or submit a pull request, your input is valuable to us.
Feel free to join us on Discord
This software is licensed under the GNU Affero General Public License v3.0 (AGPLv3) with the following additional terms:
FAQs
Hexabot is a solution for creating and managing chatbots across multiple channels, leveraging AI for advanced conversational capabilities. It provides a user-friendly interface for building, training, and deploying chatbots with integrated support for var
The npm package hexabot-chat-widget receives a total of 10 weekly downloads. As such, hexabot-chat-widget popularity was classified as not popular.
We found that hexabot-chat-widget demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
/Security News
Socket researchers uncover how threat actors weaponize Discord across the npm, PyPI, and RubyGems ecosystems to exfiltrate sensitive data.
Security News
Socket now integrates with Bun 1.3’s Security Scanner API to block risky packages at install time and enforce your organization’s policies in local dev and CI.
Research
The Socket Threat Research Team is tracking weekly intrusions into the npm registry that follow a repeatable adversarial playbook used by North Korean state-sponsored actors.