
Research
/Security News
OpenAPI React Query Codegen Compromised in Mini Shai-Hulud npm Supply Chain Attack
Ten malicious OpenAPI React Query Codegen versions were published to npm in the Mini Shai-Hulud attack, all with valid provenance.
@wcagc/source-tag
Advanced tools
A zero-runtime Vite plugin that adds deterministic data-wcagc-src="relative/file.tsx:line:column" attributes to lowercase JSX host elements. The wcagc browser extension can display those build facts without guessing a source file.
Source, tests, and CI are published at WCAG-Compliance/wcagc-source-tag under the MIT license.
import { defineConfig } from "vite";
import sourceTag from "@wcagc/source-tag";
export default defineConfig({ plugins: [sourceTag()] });
The plugin applies only to Vite's development server by default. For a controlled staging build, use sourceTag({ includeInBuild: true }). This exposes relative repository paths in rendered markup; assess that disclosure before enabling it. root, include, exclude, and attribute can be customized. Generated maps use only the validated relative source path and do not embed source content. No absolute path is emitted and no runtime code is added.
FAQs
Deterministic JSX source attributes for wcagc browser checks
The npm package @wcagc/source-tag receives a total of 6 weekly downloads. As such, @wcagc/source-tag popularity was classified as not popular.
We found that @wcagc/source-tag demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Research
/Security News
Ten malicious OpenAPI React Query Codegen versions were published to npm in the Mini Shai-Hulud attack, all with valid provenance.

Security News
Socket joins more than 100 technology, cybersecurity, and financial organizations calling for a global surge in cyber defense.

Product
Enterprise security teams can now detect malware, credential theft, suspicious network activity, and risky updates across Microsoft Edge extensions.