
Research
SANDWORM_MODE: Shai-Hulud-Style npm Worm Hijacks CI Workflows and Poisons AI Toolchains
An emerging npm supply chain attack that infects repos, steals CI secrets, and targets developer AI toolchains for further compromise.
chat-portal
Advanced tools
Pair a profile's message contacts and transport modified messages that pretend to come from the initial profile
This code automates a social media profile and makes it functions as a message exchange portal. It monitors incoming messages, pairs users based on their message content, and then relays each new message between paired users. The current implementation uses Instagram as a social platform and chatGPT to modify relayed messages in a way that makes it seem like they are comming from the automated profile.
Python >= 3.10 is required.
Follow the below steps to set up this project:
git clone https://github.com/kuco23/Chat-Portal.git.python -m venv .venv then run source .venv/bin/activate on Linux or .venv/Scripts/activate on Windows.pip install -r requirements.txt..env file and fill in the fields specified in .env.template.python run.py.Note that you can also modify the default configuration parameters inside config.cfg
WARN The package ships without the
instagrapidependency. If using this package with it, you need to install it manually withpip install instagrapi.
To use this project as a package in your own project, you can install it with pip install chat-portal.
The code is modular, cosisting of parts described by interfaces inside src/interface.py. The main code module is the Portal class with the IPortal interface, which is initialized by a IDatabase interfaced class and an ISocialPlatform interfaced class.
IDatabase interface is implemented by the Database class, which is a wrapper around an SqlAlchemy orm.ISocialPlatform interface is implemented by the Instagram class, which is a wrapper around the instagrapi library. You can implement more social media platforms inside the src/platforms folder.IPortal interface is implemented by the Portal abstract class, which is inherited by the GptPortal class. You can implement more portals inside the src/portals folder.FAQs
Pair a profile's message contacts and transport modified messages that pretend to come from the initial profile
We found that chat-portal demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
An emerging npm supply chain attack that infects repos, steals CI secrets, and targets developer AI toolchains for further compromise.

Company News
Socket is proud to join the OpenJS Foundation as a Silver Member, deepening our commitment to the long-term health and security of the JavaScript ecosystem.

Security News
npm now links to Socket's security analysis on every package page. Here's what you'll find when you click through.