From 4fe6b28e8195ddb97fef150c9f2335b741cd6158 Mon Sep 17 00:00:00 2001 From: panjunjie <46790855@qq.com> Date: Mon, 11 Aug 2025 01:50:47 +0800 Subject: [PATCH] =?UTF-8?q?=E6=9B=B4=E6=96=B0=20Jenkinsfile?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit 发布时屏蔽了 vab-contextmenu 这个包,原因是该包被检测到存在恶意行为(如窃取环境变量、删除文件等)。 --- Jenkinsfile | 8 ++++++++ 1 file changed, 8 insertions(+) diff --git a/Jenkinsfile b/Jenkinsfile index 50f7c86..c9b0b39 100644 --- a/Jenkinsfile +++ b/Jenkinsfile @@ -22,6 +22,14 @@ pipeline { sh ''' rm -rf node_modules package-lock.json npm config set registry https://registry.npmmirror.com + + # 检查并移除恶意依赖 + if grep -q "vab-contextmenu" package.json; then + echo "发现恶意依赖vab-contextmenu,正在移除..." + npm uninstall vab-contextmenu + fi + + # 安装其他依赖 npm install ''' }