Open source developer corrupts widely-used libraries, affecting tons of projects
The Verge
JANUARY 9, 2022
A developer appears to have purposefully corrupted a pair of open-source libraries on GitHub and software registry npm — “ faker.js ” and “ colors.js ” — that thousands of users depend on, rendering any project that contains these libraries useless, as reported by Bleeping Computer. million weekly downloads on npm, and color.js
Let's personalize your content