Forty-five million weekly downloads. One compromised maintainer. Three hours of exposure before anyone noticed.

Abstract: Detecting front-end JavaScript libraries in web applications is essential for website profiling, vulnerability detection, and dependency management. However, bundlers like Webpack transpile ...