
Research
2025 Report: Destructive Malware in Open Source Packages
Destructive malware is rising across open source registries, using delays and kill switches to wipe code, break builds, and disrupt CI/CD.
coffeelint-loader
Advanced tools
Apply the coffeelint loader as pre/postLoader in your webpack configuration:
module.exports = {
module: {
preLoaders: [
{
test: /\.coffee$/, // include .coffee files
exclude: /node_modules/, // exclude any and all files in the node_modules folder
loader: "coffeelint-loader"
}
]
},
// more options in the optional coffeelint object
coffeelint: {
// any coffeelint option http://www.coffeelint.com/#options
// i. e.
camel_case_classes: 'error',
// coffeelint errors are displayed by default as warnings
// set emitErrors to true to display them as errors
emitErrors: false,
// coffeelint to not interrupt the compilation
// if you want any file with coffeelint errors to fail
// set failOnErrors to true
failOnErrors: false,
// same as failOnErrors but will throw an exception for
// warnings as well
failOnWarns: false,
// custom reporter function
reporter: function(results) {
var errors = result.error;
war warns = result.warn;
}
}
}
By default, coffeelint-loader will provide a default reporter.
However, if you prefer a custom reporter, pass a function under the reporter key in coffeelint options. (see usage above)
The reporter function will be passed an object containing error and warn arrays produced by coffeelint with the following structure:
{
error: [
{
rule : 'Name of the violated rule',
lineNumber: 'Number of the line that caused the violation',
level: 'The severity level of the violated rule',
message: 'Information about the violated rule',
context: 'Optional details about why the rule was violated'
}
//...
],
warn: [
{
//...
},
//...
]
}
The reporter function will be excuted with the loader context as this. You may emit messages using this.emitWarning(...) or this.emitError(...). See webpack docs on loader context.
The output in webpack CLI will usually be:
...
WARNING in ./path/to/file.js
<reporter output>
...
FAQs
coffeelint loader module for webpack
We found that coffeelint-loader demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
Destructive malware is rising across open source registries, using delays and kill switches to wipe code, break builds, and disrupt CI/CD.

Security News
Socket CTO Ahmad Nassri shares practical AI coding techniques, tools, and team workflows, plus what still feels noisy and why shipping remains human-led.

Research
/Security News
A five-month operation turned 27 npm packages into durable hosting for browser-run lures that mimic document-sharing portals and Microsoft sign-in, targeting 25 organizations across manufacturing, industrial automation, plastics, and healthcare for credential theft.