
Security News
/Research
Wallet-Draining npm Package Impersonates Nodemailer to Hijack Crypto Transactions
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
@ttoohey/babel-engine-plugin
Advanced tools
Webpack plugin that transpiles dependencies targeting Node.js versions newer than Node.js 0.10
Webpack plugin that transpiles dependencies targeting Node.js versions newer than Node.js 0.10
$ npm install --save-dev babel-engine-plugin
Within your webpack configuration object, you'll need to add the babel-engine-plugin
to the list of plugins
.
const BabelEnginePlugin = require('babel-engine-plugin');
module.exports = {
entry: './app.js',
output: {
filename: 'bundle.js'
},
plugins: [
new BabelEnginePlugin({
presets: ['env']
})
]
}
Module maintainers often only target Node.js and don't really care about browser support. Tools like Webpack allow you to easily bundle these modules and run them in the browser. But since Node.js 0.12 became deprecated, module maintainers started to leverage the new ES2016 features, for example fat-arrow functions. This becomes a problem because not all of these features are supported in the browser. Tools like UglifyJS doesn't like them either as it will fail with an Unexpected Token
error.
The most popular Webpack loader for Babel, babel-loader
, describes that you should exclude node_modules
because you should transpile as few files as possible. This means, you will also exclude all the modules that utilize the new ES2016 features.
This Webpack plugin only transpiles modules in node_modules
, if you need to transpile your source files as well, use babel-loader
. This plugin checks the engines
field in package.json
and only transpiles the dependency if it does not support Node.js 0.10.
The full discussion can be found here.
See babel
options.
Type: boolean
Default: true
By disabling verbose logging, the plugin will only print the warning per package once.
MIT © Sam Verschueren
FAQs
Webpack plugin that transpiles dependencies targeting Node.js versions newer than Node.js 0.10
The npm package @ttoohey/babel-engine-plugin receives a total of 0 weekly downloads. As such, @ttoohey/babel-engine-plugin popularity was classified as not popular.
We found that @ttoohey/babel-engine-plugin demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
/Research
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
Security News
This episode explores the hard problem of reachability analysis, from static analysis limits to handling dynamic languages and massive dependency trees.
Security News
/Research
Malicious Nx npm versions stole secrets and wallet info using AI CLI tools; Socket’s AI scanner detected the supply chain attack and flagged the malware.