
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
WebContainer Executor - Headless build tool for frontend projects.
Security software real-time file scanning causes extreme I/O delays during npm install. wc-exe bypasses this by running builds inside a browser's WebContainer where files exist only in memory.
npm install -g wc-exe
# or
pnpm add -g wc-exe
Build your project using WebContainer:
# In your project directory
wc-exe
# With options
wc-exe build --source ./src --output ./dist
wc-exe build --no-install # Skip npm install
wc-exe build --verbose # Show detailed logs
Start a development server with hot reload:
wc-exe dev
# With custom port
wc-exe dev --port 3000
Features:
Install dependencies without building:
wc-exe install
┌─────────────────────────────────────────────────────────┐
│ Local Environment (with security software) │
│ │
│ 1. Hono Server (dynamic port) │
│ └─ COEP/COOP headers for WebContainer │
│ │
│ 2. Puppeteer (Headless Chrome) │
│ └─ Runs WebContainer in browser │
│ │
│ 3. WebContainer (in browser memory) │
│ ├─ Mount source files │
│ ├─ npm install (bypasses file scanning!) │
│ ├─ npm run build │
│ └─ Extract dist/ output │
│ │
│ 4. Only dist/ folder written to local filesystem │
└─────────────────────────────────────────────────────────┘
wc-exe [command] [options]
Commands:
build Build the project (default)
dev Start development server
install Install dependencies only
Build Options:
-s, --source <path> Source directory (default: ".")
-o, --output <path> Output directory (default: "./dist")
-d, --dist-dir <path> Dist directory in WebContainer (default: "/dist")
-t, --timeout <ms> Timeout for npm commands (default: 600000)
--no-timeout Disable timeout for npm commands
--no-install Skip npm install
--verbose Show detailed logs
Dev Options:
-p, --port <number> Preview port (default: 5173)
--open Open browser automatically
Install Options:
--cache Use cached node_modules
| Variable | Description |
|---|---|
CHROME_PATH | Custom path to Chrome/Chromium executable |
Example:
CHROME_PATH=/usr/bin/chromium wc-exe build
FAQs
WebContainer Executor - Headless build tool for frontend projects
We found that wc-exe demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.