
Research
/Security News
77 Firefox Extensions Linked to Crypto Wallet and Credential Theft
Socket uncovered 77 linked Firefox extensions, including 40 that steal wallet secrets or credentials and 37 deceptive sports-score shells.
@foldkit/vite-plugin
Advanced tools
Vite plugin for Foldkit that enables hot module reloading with model preservation.
npm install -D @foldkit/vite-plugin
# or
pnpm add -D @foldkit/vite-plugin
# or
yarn add -D @foldkit/vite-plugin
Add the plugin to your vite.config.ts:
import { foldkit } from '@foldkit/vite-plugin'
import { defineConfig } from 'vite'
export default defineConfig({
plugins: [foldkit()],
})
When you save a file during development, the plugin:
This means you can make code changes without losing your application's state - forms stay filled, counters keep their values, game positions are maintained, etc.
The plugin uses Vite's WebSocket connection to communicate between the dev server and browser:
Model is preserved across hot reloads but cleared on manual browser refreshes, giving you control over when to reset your app.
Pass devToolsMcpPort to enable the relay that exposes your running Foldkit app to AI agents via the @foldkit/devtools-mcp MCP server:
plugins: [foldkit({ devToolsMcpPort: 9988 })]
When set, the plugin opens a separate WebSocket server on the given port. The MCP server connects to it and forwards typed Request and Response frames between AI agents and your runtime. Without devToolsMcpPort (the default), the relay is not started and the plugin behaves exactly as before.
See the DevTools MCP documentation for setup, the available tools, and how dispatch validation works.
MIT
FAQs
Vite plugin for Foldkit hot module reloading with state preservation
The npm package @foldkit/vite-plugin receives a total of 2,637 weekly downloads. As such, @foldkit/vite-plugin popularity was classified as popular.
We found that @foldkit/vite-plugin demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
Socket uncovered 77 linked Firefox extensions, including 40 that steal wallet secrets or credentials and 37 deceptive sports-score shells.

Security News
NIST disclosed an unreleased AI tool called V-etalon and opened a broad inquiry into NVD modernization after years of automation plans produced no public enrichment system.

Security News
In his AI Council 2026 talk, Feross Aboukhadijeh covers recent package compromises, vulnerability discovery, and a more automated security model.