
Research
/Security News
Bitwarden CLI Compromised in Ongoing Checkmarx Supply Chain Campaign
Bitwarden CLI 2026.4.0 was compromised in the Checkmarx supply chain campaign after attackers abused a GitHub Action in Bitwarden’s CI/CD pipeline.
vite-plugin-run
Advanced tools
A plugin for running commands when files change or when Vite starts.
npm i -D vite-plugin-run
Install vite-plugin-run and add it to your Vite configuration:
import { run } from 'vite-plugin-run'
export default defineConfig({
plugins: [
laravel(),
vue(),
run([
{
name: 'typescript transform',
run: ['php', 'artisan', 'typescript:transform'],
pattern: ['app/**/*Data.php', 'app/**/Enums/**/*.php'],
},
{
name: 'build routes',
run: ['php', 'artisan', 'routes:generate'],
condition: (file) => file.includes('/routes/'),
},
]),
],
})
You can either use a pattern or a condition to specify how the files changes should be detected.
When a file in your project changes, its path will be given as an argument to condition. If the function returns true, a shell command described by run will be executed.
| Option | Type | Description | Default |
|---|---|---|---|
silent | bool | Whether to hide the commands output in the console | true |
skipDts | bool | Whether to skip HMR reloads when a .d.ts file changes | true |
input | Runner[] | List of runners | [] |
Optionally, you can directly pass a runner or a list of runner to the plugin options.
| Option | Type | Description | Default |
|---|---|---|---|
startup | bool | Whether the command should run when Vite starts | true |
build | bool | Whether the command should run when Vite builds | true |
name | string | An identifier for the runner, used in logs | |
condition | () => boolean | A function that should return true for a file change to execute the runner | |
pattern | string or string[] | A minimatch pattern which files must match | |
run | () => string[] or string[] | A command executed when a file changed and the condition matches | |
onFileChanged | () =>void | A callback executed when a file changed and the condition matches | |
debounce | number | Debounce delay before running the file-change handler and command | 50 |
·
Built with ❤︎ by Enzo Innocenzi
FAQs
Runner plugin for Vite
We found that vite-plugin-run demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
Bitwarden CLI 2026.4.0 was compromised in the Checkmarx supply chain campaign after attackers abused a GitHub Action in Bitwarden’s CI/CD pipeline.

Research
/Security News
Docker and Socket have uncovered malicious Checkmarx KICS images and suspicious code extension releases in a broader supply chain compromise.

Product
Stay on top of alert changes with filtered subscriptions, batched summaries, and notification routing built for triage.