Is there an existing issue for this?

• I have searched the existing issues

Current Behavior

The packages downloaded in the node_modules folder and the "package.json" file of the relevant packages contain details to reveal the full path of the server.

For example, when I downloaded the axios package, the full path to my server was leaked in the "chunk" files created after I included it in my project with webpack and got the build

Google dork: "axios _where"
Google dork: "[ANY-PACKAGENAME] _where"

node_modules/axios/package.json

 "_where": "/home/User/Workdir",
  "author": {
    "name": "Matt Zabriskie"
  },

axios/axios#4090
In this example I went via axios but this applies to all packages. I hope you fix this in the next version of NPM

Expected Behavior

No response

Steps To Reproduce

1. In this environment...
2. With this config...
3. Run '...'
4. See error...

Environment

• OS:
• Node:
• npm: