vue-compiler-sfc-plugin

Scanned versions

Related campaigns

• js_hidden_powershell:hidden / non-interactive powershell invocation in package code — typically `-windowstyle hidden`, `irm | iex`, or `windowshide: true` — used to download-and-run payloads on windows installers. — 10 releases, max score 102

Block this in CI

PkgRadar gates vue-compiler-sfc-plugin (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm [email protected]