
Research
/Security News
9 Malicious NuGet Packages Deliver Time-Delayed Destructive Payloads
Socket researchers discovered nine malicious NuGet packages that use time-delayed payloads to crash applications and corrupt industrial control systems.
additional-compile-webpack-plugin
Advanced tools
Kick off another webpack compilation after the main one has finished
Yo dawg! I put a compiler in your compiler, so you can compile
whileafter you compile!
This plugin enables you to start another compile step with access to the output of the main compilation.
For example, if your current webpack setup generates dist/lib.js, with this
plugin you can configure a child compilation step that executes after
dist/lib.js has been built, so you can require() it.
The plugin expects a webpack configuration object during initialization.
Currently only entry, output and plugins are supported. In addition to
that, the child compilation inherits the configuration of the main compilation.
Example:
const PostCompilePlugin = require( 'post-compile-webpack-plugin' );
const path = require( 'path' );
module.exports = {
entry: {
lib: './index.js'
},
output: {
path: path.resolve(__dirname, 'dist'),
filename: '[name].js'
},
plugins: [
new PostCompilePlugin({
entry: {
example1: './examples/example1.js',
example2: './examples/example2.js'
}
})
]
};
FAQs
Kick off another webpack compilation after the main one has finished
We found that additional-compile-webpack-plugin demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
Socket researchers discovered nine malicious NuGet packages that use time-delayed payloads to crash applications and corrupt industrial control systems.

Security News
Socket CTO Ahmad Nassri discusses why supply chain attacks now target developer machines and what AI means for the future of enterprise security.

Security News
Learn the essential steps every developer should take to stay secure on npm and reduce exposure to supply chain attacks.