Open source developer corrupts widely-used libraries, affecting tons of projects
The Verge
JANUARY 9, 2022
A developer appears to have purposefully corrupted a pair of open-source libraries on GitHub and software registry npm — “ faker.js ” and “ colors.js ” — that thousands of users depend on, rendering any project that contains these libraries useless, as reported by Bleeping Computer. Illustration by Alex Castro / The Verge.
Let's personalize your content