diff --git a/src/static/js/admin/plugins.js b/src/static/js/admin/plugins.js
index 8dcb4a60c..613df3688 100644
--- a/src/static/js/admin/plugins.js
+++ b/src/static/js/admin/plugins.js
@@ -84,9 +84,10 @@ $(document).ready(() => {
 
       for (const attr in plugin) {
         if (attr === 'name') { // Hack to rewrite URLS into name
-          const link = $('<a>');
+          const link = $('<a href="">'); // intentional null href
           link.attr('href', `https://npmjs.org/package/${plugin.name}`);
           link.attr('plugin', 'Plugin details');
+          link.attr('rel', 'noopener noreferrer');
           link.attr('target', '_blank');
           link.text(plugin.name.substr(3));
           row.find('.name').append(link);