Affecting parcel package, versions <1.10
parcel is a web application bundler.
Affected versions of this package are vulnerable to Information Exposure. A malicious user was able to steal user's code as the origin of requests wasn't checked by websocket server, as long as they share the same network.
parcel to version 1.10 or higher.