
Research
2025 Report: Destructive Malware in Open Source Packages
Destructive malware is rising across open source registries, using delays and kill switches to wipe code, break builds, and disrupt CI/CD.
@rushstack/hashed-folder-copy-plugin
Advanced tools
Webpack plugin for copying a folder to the output directory with a hash in the folder name.
npm install @rushstack/hashed-folder-copy-plugin --save-dev
This webpack plugin provides a simple method for copying a folder to the build output and including a hash in the folder's name, accessible to the bundle's runtime.
In your Webpack config, include the plugin in your plugins array:
import { HashedFolderCopyPlugin } from '@rushstack/hashed-folder-copy-plugin';
{
plugins: [
new HashedFolderCopyPlugin()
]
}
and call the requireFolder function in your webpack bundle:
const folderUrl = requireFolder({
outputFolder: 'my-folder-name_[hash]',
sources: [
{
globsBase: '../assets/',
globs: ['**/*.png']
}
]
})
TypeScript typings are provided for the requireFolder function:
import type { IRequireFolderOptions } from '@rushstack/hashed-folder-copy-plugin';
declare function requireFolder(options: IRequireFolderOptions): string;
const folderUrl: string = requireFolder({
outputFolder: 'my-folder-name_[hash]',
sources: [
{
globsBase: '../assets/',
globPatterns: ['**/*.png']
}
]
})
The requireFolder takes an options object with two properties:
outputFolderThis is the name of the folder to be created in the webpack output folder. Its
name supports a [hash] token, which will be replaced with a stable hash of the assets
that are copied to the folder. Note that the [hash] token is not required.
sourcesThis is an array of glob base paths and glob patterns that will be copied to the
output folder. Each entry in this array takes a globsBase property, which is the
base path to the folder to be copied, and a globPatterns property, which is an array of
glob patterns to be evaluated under the globsBase folder. The path in globsBase
supports standard Node resolution.
See the example project.
To get the requireFolder function type to work in TypeScript, include a reference to
"@rushstack/hashed-folder-copy-plugin/ambientTypes" in your tsconfig.json file's
compilerOptions.types property. For example:
{
"compilerOptions": {
"types": [
"webpack-env",
"@rushstack/hashed-folder-copy-plugin/ambientTypes" // This value, specifically
]
}
}
FAQs
Webpack plugin for copying a folder to the output directory with a hash in the folder name.
We found that @rushstack/hashed-folder-copy-plugin demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 3 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
Destructive malware is rising across open source registries, using delays and kill switches to wipe code, break builds, and disrupt CI/CD.

Security News
Socket CTO Ahmad Nassri shares practical AI coding techniques, tools, and team workflows, plus what still feels noisy and why shipping remains human-led.

Research
/Security News
A five-month operation turned 27 npm packages into durable hosting for browser-run lures that mimic document-sharing portals and Microsoft sign-in, targeting 25 organizations across manufacturing, industrial automation, plastics, and healthcare for credential theft.