
Research
/Security News
Bitwarden CLI Compromised in Ongoing Checkmarx Supply Chain Campaign
Bitwarden CLI 2026.4.0 was compromised in the Checkmarx supply chain campaign after attackers abused a GitHub Action in Bitwarden’s CI/CD pipeline.
@nuxt/module-builder
Advanced tools
Complete solution to build Nuxt Modules.
🧪 This tool is still under heavy development for Nuxt3. Feedback is more than welcome!
@nuxt/schemaUsing module builder, requires a special project setup. You can check a full example here.
src/module.tsThis is the entrypoint for module definition.
A default export using defineNuxtModule and ModuleOptions type export is expected.
import { defineNuxtModule } from '@nuxt/kit'
export interface ModuleOptions {
apiKey: string
}
export default defineNuxtModule<ModuleOptions>({
meta: {
name: 'my-module',
configKey: 'myModule'
},
defaults: {
apiKey: 'test'
},
async setup (moduleOptions, nuxt) {
// Write module logic in setup function
}
})
src/runtime/Any runtime file and code that we need to provide by module including plugins, composables and server api, should be in this directory.
Each file will be transformed individually using unjs/mkdist to dist/runtime/.
package.json:A minimum package.json should look like this:
{
"name": "my-module",
"license": "MIT",
"version": "1.0.0",
"exports": {
".": {
"import": "./dist/module.mjs",
"require": "./dist/module.cjs"
}
},
"main": "./dist/module.cjs",
"types": "./dist/types.d.ts",
"files": [
"dist"
],
"scripts": {
"prepack": "nuxt-module-build"
},
"dependencies": {
"@nuxt/kit": "npm:@nuxt/kit-edge@latest"
},
"devDependencies": {
"@nuxt/module-builder": "latest"
}
}
Module builder generates dist files in dist/ directory:
module.mjs: Module entrypoint build from src/modulemodule.json: Module meta extracted from module.mjs + package.jsonmodule.cjs: ESM proxy to allow require module in CommonJS contexttypes.d.ts: Exported types in addition to shims for nuxt.config auto completion.runtime/*: Individually transformed files using unjs/mkdist
.ts files will be transformed to .mjs with extracted types on .d.ts file with same name.vue files will be transformed with extracted .d.ts filecorepack enable (use npm i -g corepack for Node.js < 16.10)yarn installyarn example:buildMIT - Made with 💚
FAQs
Complete solution for building Nuxt modules
The npm package @nuxt/module-builder receives a total of 60,639 weekly downloads. As such, @nuxt/module-builder popularity was classified as popular.
We found that @nuxt/module-builder demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 5 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
Bitwarden CLI 2026.4.0 was compromised in the Checkmarx supply chain campaign after attackers abused a GitHub Action in Bitwarden’s CI/CD pipeline.

Research
/Security News
Docker and Socket have uncovered malicious Checkmarx KICS images and suspicious code extension releases in a broader supply chain compromise.

Product
Stay on top of alert changes with filtered subscriptions, batched summaries, and notification routing built for triage.