Darshit Dudhaiya
@darshitdudhaiya.bsky.social
Freelance Full-Stack Developer | Vue.js, Nuxt.js, React.js, Next.js | Building Scalable & SEO-Optimized Web Apps 🚀
🚨 Be very careful with Shadcn registries.
Just ran a POC where a malicious registry.json silently executes arbitrary code during vite dev.
No warning. No prompt. Just runs. 😳
Even the official registry could be compromised.
💡 Safer option? Manually copy the components.
#shadcn #vite #javascript
Just ran a POC where a malicious registry.json silently executes arbitrary code during vite dev.
No warning. No prompt. Just runs. 😳
Even the official registry could be compromised.
💡 Safer option? Manually copy the components.
#shadcn #vite #javascript
July 23, 2025 at 6:01 AM
🚨 Be very careful with Shadcn registries.
Just ran a POC where a malicious registry.json silently executes arbitrary code during vite dev.
No warning. No prompt. Just runs. 😳
Even the official registry could be compromised.
💡 Safer option? Manually copy the components.
#shadcn #vite #javascript
Just ran a POC where a malicious registry.json silently executes arbitrary code during vite dev.
No warning. No prompt. Just runs. 😳
Even the official registry could be compromised.
💡 Safer option? Manually copy the components.
#shadcn #vite #javascript