See the full list of npm packages compromised in the "SHA1-Hulud npm supply chain incident – Nov 2025" [View compromised packages].
carte-blanche-react-plugin vulnerabilities
This plugin gives you an isolated development space for your react components. It starts a server at `localhost:8082` for saving and editing your variations.