
Research
/Security News
Two Joyfill npm Beta Releases Compromised to Deliver DEV#POPPER Remote Access Trojan
Two Joyfill npm beta releases contain an import-time implant that uses blockchain transactions to retrieve a remote-access trojan.
memory-crystal
Advanced tools
Sovereign memory system — local-first with ephemeral encrypted relay. Your memory, your machine, your rules.
Memory Crystal lets all your AIs remember you ... together.
You use multiple AIs. They don't talk to each other. They can't search what the others know. Have you ever thought to yourself ... why isn't this all connected?
Memory Crystal fixes this.
All your AIs share one memory. Searchable and private. Anywhere in the world.
Open your AI and say:
Read the SKILL.md at github.com/wipcomputer/memory-crystal/blob/main/skills/memory/SKILL.md.
Then explain to me:
1. What is this tool?
2. What does it do?
3. What would it change about how we work together?
Then ask me:
- Do you have more questions?
- Do you want to install it?
If I say yes, run: crystal init
Your agent will read the repo, explain everything, and walk you through setup interactively.
Local Memory
Multi-Device Memory
AI-to-AI Communication
Intelligent Install
Import Memories
Memory Consolidation
Backups
We just built a sovereign memory system for AI agents.
Every conversation you have with any agent ... on any device, anywhere ... gets captured, encrypted on your machine, and relayed through a dead drop to your home server. Your home server is the brain. It embeds everything, indexes it, and makes it searchable. Then it pushes a read-only mirror back out to every device you carry.
Full semantic search. Full keyword search. Every conversation you've ever had with every agent, from anywhere, on your terms.
The cloud relay is blind. It holds encrypted blobs for minutes, then they're gone. No database, no search capability, no API keys, no encryption keys. It can't read what it's holding. It's just a mailbox.
The security model: your memory lives on your hardware. The encryption key lives on your hardware. Nothing persists in the cloud. The relay is ephemeral. The data is sovereign.
This is the missing piece for AI agents. Right now, every agent you talk to forgets everything the moment the conversation ends. Or worse, some company stores your conversations on their servers and charges you $19/month to search them. We built the alternative: your memory, your machines, your rules. Fully open source, fully auditable, zero cloud dependency for the actual data.
Any device. Any agent. Any interface. One searchable memory that travels with you and belongs to you.
Written by Claude Code (Claude Opus 4.6), from the other side. Built with Parker Todd Brooks and Lēsa.
src/core.ts, cli.ts, mcp-server.ts, skills/ MIT (use anywhere, no restrictions)
src/worker.ts, src/worker-mcp.ts AGPL (relay + cloud server)
AGPL for personal use is free.
Built by Parker Todd Brooks, Lēsa (OpenClaw, Claude Opus 4.6), Claude Code CLI (Claude Opus 4.6).
Search architecture inspired by QMD by Tobi Lutke (MIT, 2024-2026).
FAQs
Sovereign memory system — local-first with ephemeral encrypted relay. Your memory, your machine, your rules.
The npm package memory-crystal receives a total of 13 weekly downloads. As such, memory-crystal popularity was classified as not popular.
We found that memory-crystal demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
Two Joyfill npm beta releases contain an import-time implant that uses blockchain transactions to retrieve a remote-access trojan.

Security News
Socket releases free Certified Patches for high-severity Nuxt vulnerabilities, including server-side remote code execution through server island props.

Security News
An open letter signed by 50 companies, from NVIDIA and Microsoft to Mistral and Hugging Face, urges Washington not to restrict open weight AI.