w3bs.AccountStart building
PACKAGES / Profullstack

qryptchat

End-to-end encrypted terminal chat client for qrypt.chat using ML-KEM-1024, with a scriptable CLI.

ThreatCrush · No malware found
INSTALLw3bs install qrypt.chat/qryptchat

No w3bs yet? curl -fsSL https://w3bs.org/install.sh | sh

Get started

What to type once it is installed.

  1. w3bs install qrypt.chat/qryptchatInstall qryptchat and track it for updates
  2. qc loginSign in through your browser (--oob to paste a code over SSH)
  3. qcOpen the full-screen chat client
  4. qc chatsList your chats
  5. qc send <chat> "<text>"Send a message to a chat

Every option: qc --help · docs ↗

Malware scan

ThreatCrush found no malware indicators in qryptchat 0.20.0. The other findings below are ordinary code-review notes, not malware.

Scanned
2026-11-01 22:56 UTC · threatcrush 0.13.30
Files
791 (installer + github.com/profullstack/qryptchat-web)
Findings
14 medium · 4 low
18 other findings (not malware)
  • medium
    unescaped HTML renderingsource/src/app/blog/[slug]/page.jsx:38js-unescaped-html-sink · CWE-79
  • medium
    unescaped HTML renderingsource/src/app/blog/[slug]/page.jsx:66js-unescaped-html-sink · CWE-79
  • medium
    unescaped HTML renderingsource/src/app/faq/page.jsx:57js-unescaped-html-sink · CWE-79
  • medium
    unescaped HTML renderingsource/src/app/layout.jsx:142js-unescaped-html-sink · CWE-79
  • medium
    unescaped HTML renderingsource/src/app/layout.jsx:146js-unescaped-html-sink · CWE-79
  • medium
    unescaped HTML renderingsource/src/app/page.jsx:50js-unescaped-html-sink · CWE-79
  • medium
    redirect to a non-constant destinationsource/src/app/phone/page.jsx:70js-open-redirect · CWE-601
  • medium
    regex with nested unbounded quantifierssource/src/lib/auth/dns-name.js:88redos-nested-quantifier · CWE-1333
  • medium
    regex with nested unbounded quantifierssource/src/lib/chat/voice-mode.js:116redos-nested-quantifier · CWE-1333
  • medium
    regex with nested unbounded quantifierssource/src/lib/chat/voice-mode.js:121redos-nested-quantifier · CWE-1333
  • medium
    unescaped HTML renderingsource/src/lib/components/chat/MessageItem.jsx:85js-unescaped-html-sink · CWE-79
  • medium
    unescaped HTML renderingsource/src/lib/components/chat/MessageItem.jsx:130js-unescaped-html-sink · CWE-79
  • medium
    unescaped HTML renderingsource/src/lib/components/PitFooter.jsx:15js-unescaped-html-sink · CWE-79
  • medium
    redirect to a non-constant destinationsource/src/lib/components/settings/CoinpaySettings.jsx:62js-open-redirect · CWE-601
  • low
    Hardcoded Credentialsource/src/app/api/auth/register-anon/route.test.js:32secret-generic-credential · CWE-798
  • low
    JSON Web Tokensource/tests/debug-sms.js:10secret-jwt · CWE-798
  • low
    Hardcoded Credentialsource/tests/private-key-import-export.test.js:252secret-generic-credential · CWE-798
  • low
    Hardcoded Credentialsource/tests/private-key-import-export.test.js:264secret-generic-credential · CWE-798

Badge for your README

ThreatCrush: No malware found

[![ThreatCrush scan](https://w3bs.org/api/packages/qrypt.chat/qryptchat/badge.svg)](https://w3bs.org/packages/qrypt.chat/qryptchat)