
Security News
Re-Enabled GitHub Actions Expose Thousands of Repositories to Mini Shai-Hulud
Two compromised GitHub Actions were re-enabled with malicious tags intact, exposing thousands of downstream repositories to Mini Shai-Hulud.
@syncrona/webpack-plugin
Advanced tools
SyncroNow AI build plugin that bundles files with Webpack in the ServiceNow sync pipeline (honors webpack.config.js and sync.config.js).
This plugin allows you to run Webpack on your desired files. This allows you to build frontend bundles in a more modern way or even potentially bundle server side javascript files.
npm i -D @syncrona/webpack-plugin
| Key | Type | Default | Description |
|---|---|---|---|
configGenerator | (context:Sync.FileContext)=>webpack.Configuration | ()=>{} | Function that can generate a webpack configuration object. A Sync.FileContext is passed in so that you can substitute options using the context |
webpackConfig | webpack.Configuration | {} | Same as webpack.config.js object |
webpack.config.js.webpackConfig in sync.config.js and override any overlapping values.configGenerator() from configGenerator option in sync.config.js and override any overlapping values.This example takes .wp.js files and bundles them with webpack by generating the options with a function
//sync.config.js
module.exports={
rules:{
match:/\.wp\.js$/,
plugins:[
name:"@syncrona/webpack-plugin",
options:{
configGenerator:(context)=>{
mode:"production",
//set name of record as the library name
library:context.name
}
}
]
}
};
FAQs
SyncroNow AI build plugin that bundles files with Webpack in the ServiceNow sync pipeline (honors webpack.config.js and sync.config.js).
The npm package @syncrona/webpack-plugin receives a total of 1 weekly downloads. As such, @syncrona/webpack-plugin popularity was classified as not popular.
We found that @syncrona/webpack-plugin demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
Two compromised GitHub Actions were re-enabled with malicious tags intact, exposing thousands of downstream repositories to Mini Shai-Hulud.

Research
/Security News
A malicious Firefox extension fetches its payload after installation to evade detection, steal Google session cookies, and automate account takeover.

Research
/Security News
The compromise affects MemTensor's MemOS, an open source memory framework for large language models (LLMs) and AI agents. Both npm package @memtensor/memos-cloud-openclaw-plugin and the PyPI package MemoryOS are compromised. They drop cross-platform Go binaries that exfiltrate developer secrets.