Paul Nothaft
bec36fc99f
Axios versions 1.14.1 and 0.30.4 were compromised on March 31, 2026 with a RAT dropper (plain-crypto-js) attributed to North Korean threat actor UNC1069/Sapphire Sleet. The malicious versions have been removed from npm but our ^1.12.2 range could have pulled 1.14.1 on next install. Pin to exact version 1.14.0 (latest safe release) in both frontend and backend package.json and lock files to prevent any future resolution to compromised versions. References: - https://github.com/axios/axios/issues/10604 - https://snyk.io/blog/axios-npm-package-compromised-supply-chain-attack-delivers-cross-platform/
85 lines
2.5 KiB
JSON
85 lines
2.5 KiB
JSON
{
|
|
"name": "picpeak-frontend",
|
|
"private": true,
|
|
"version": "3.24.0-beta.0",
|
|
"type": "module",
|
|
"scripts": {
|
|
"dev": "vite",
|
|
"build": "node ./scripts/build.js",
|
|
"build:check": "tsc -b && node ./scripts/build.js",
|
|
"lint": "eslint .",
|
|
"preview": "vite preview",
|
|
"test": "vitest run src/components/admin/__tests__/ThemeCustomizerEnhanced.test.tsx"
|
|
},
|
|
"dependencies": {
|
|
"@tanstack/react-query": "^5.0.0",
|
|
"@tiptap/extension-character-count": "^2.26.1",
|
|
"@tiptap/extension-code-block-lowlight": "^2.26.1",
|
|
"@tiptap/extension-hard-break": "^2.26.1",
|
|
"@tiptap/extension-link": "^2.25.0",
|
|
"@tiptap/extension-placeholder": "^2.26.1",
|
|
"@tiptap/extension-text-align": "^2.26.1",
|
|
"@tiptap/react": "^2.25.0",
|
|
"@tiptap/starter-kit": "^2.25.0",
|
|
"@types/dompurify": "^3.0.5",
|
|
"@types/lodash": "^4.17.20",
|
|
"@types/react-google-recaptcha": "^2.1.9",
|
|
"axios": "1.14.0",
|
|
"clsx": "^2.0.0",
|
|
"date-fns": "4.1.0",
|
|
"dompurify": "^3.2.6",
|
|
"framer-motion": "^12.33.0",
|
|
"i18next": "^25.3.1",
|
|
"i18next-browser-languagedetector": "^8.2.0",
|
|
"i18next-http-backend": "^3.0.2",
|
|
"justified-layout": "^4.1.0",
|
|
"linkifyjs": "^4.3.2",
|
|
"lodash": "^4.17.21",
|
|
"lowlight": "^2.9.0",
|
|
"lucide-react": "0.525.0",
|
|
"photoswipe": "^5.4.4",
|
|
"react": "^18.3.1",
|
|
"react-countdown": "^2.3.5",
|
|
"react-dom": "^18.3.1",
|
|
"react-google-recaptcha": "^3.1.0",
|
|
"react-i18next": "^15.6.0",
|
|
"react-image-gallery": "^1.2.11",
|
|
"react-intersection-observer": "^9.4.3",
|
|
"react-photo-album": "^3.4.0",
|
|
"react-router-dom": "^6.8.0",
|
|
"react-toastify": "11.0.5",
|
|
"swiper": "^12.1.0",
|
|
"tailwind-merge": "^3.3.1",
|
|
"yet-another-react-lightbox": "^3.28.0"
|
|
},
|
|
"devDependencies": {
|
|
"@eslint/js": "^9.29.0",
|
|
"@testing-library/jest-dom": "^6.6.3",
|
|
"@testing-library/react": "^16.1.0",
|
|
"@testing-library/user-event": "^14.6.1",
|
|
"@types/react": "^18.3.12",
|
|
"@types/react-dom": "^18.3.1",
|
|
"@vitejs/plugin-react": "^4.5.3",
|
|
"autoprefixer": "^10.4.13",
|
|
"cross-env": "^10.1.0",
|
|
"eslint": "^9.29.0",
|
|
"eslint-plugin-react-hooks": "^5.2.0",
|
|
"eslint-plugin-react-refresh": "^0.4.20",
|
|
"globals": "^16.2.0",
|
|
"jsdom": "^25.0.1",
|
|
"postcss": "^8.4.21",
|
|
"tailwindcss": "^3.3.0",
|
|
"typescript": "~5.8.3",
|
|
"typescript-eslint": "^8.34.1",
|
|
"vite": "^7.1.12",
|
|
"vitest": "^3.2.4"
|
|
},
|
|
"optionalDependencies": {
|
|
"@rollup/rollup-linux-x64-gnu": "^4.45.1"
|
|
},
|
|
"overrides": {
|
|
"glob": "^11.1.0",
|
|
"js-yaml": "^4.1.1"
|
|
}
|
|
}
|