{"id":102213,"date":"2021-11-05T03:36:51","date_gmt":"2021-11-05T01:36:51","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/v-npm-paket-coa-naschityvayushhij-9-mln-zagruzok-v-nedelyu-vnedreno-vredonosnoe-po"},"modified":"2021-11-05T03:36:51","modified_gmt":"2021-11-05T01:36:51","slug":"v-npm-paket-coa-naschityvayushhij-9-mln-zagruzok-v-nedelyu-vnedreno-vredonosnoe-po","status":"publish","type":"post","link":"https:\/\/prohoster.info\/cs\/blog\/news\/v-npm-paket-coa-naschityvayushhij-9-mln-zagruzok-v-nedelyu-vnedreno-vredonosnoe-po","title":{"rendered":"Do NPM bal\u00ed\u010dku coa, kter\u00fd m\u00e1 9 milion\u016f sta\u017een\u00ed t\u00fddn\u011b, bylo vlo\u017eeno malware.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

\u00dato\u010dn\u00edk\u016fm se poda\u0159ilo z\u00edskat kontrolu nad NPM bal\u00ed\u010dkem coa a vydat aktualizace 2.0.3, 2.0.4, 2.1.1, 2.1.3 a 3.1.3, kter\u00e9 obsahuj\u00ed \u0161kodliv\u00e9 \u00fapravy. Bal\u00ed\u010dek coa, kter\u00fd poskytuje funkce pro parsov\u00e1n\u00ed p\u0159\u00edkazov\u00fdch argument\u016f, m\u00e1 p\u0159ibli\u017en\u011b 9 milion\u016f stahov\u00e1n\u00ed t\u00fddn\u011b a je pou\u017e\u00edv\u00e1n jako z\u00e1vislost u 159 dal\u0161\u00edch NPM bal\u00ed\u010dk\u016f, v\u010detn\u011b react-scripts a vue\/cli-service. Spr\u00e1va NPM ji\u017e odstranila vyd\u00e1n\u00ed se \u0161kodliv\u00fdmi zm\u011bnami a zablokovala publikaci nov\u00fdch verz\u00ed do doby, ne\u017e bude obnoven p\u0159\u00edstup k repozit\u00e1\u0159i hlavn\u00edho v\u00fdvoj\u00e1\u0159e. <\/p>\n

\u00datok byl proveden skrze kompromitaci \u00fa\u010dtu v\u00fdvoj\u00e1\u0159e projektu. P\u0159idan\u00e9 \u0161kodliv\u00e9 zm\u011bny jsou podobn\u00e9 t\u011bm, kter\u00e9 byly pou\u017eity p\u0159i \u00fatoku na u\u017eivatele NPM bal\u00ed\u010dku UAParser.js p\u0159ed dv\u011bma t\u00fddny, ale byly zam\u011b\u0159eny pouze na platformu Windows (v bal\u00ed\u010dc\u00edch pro Linux a macOS byly ponech\u00e1ny pr\u00e1zdn\u00e9 z\u00e1stupce). Na syst\u00e9m u\u017eivatele byl z extern\u00edho hostitele sta\u017een a spu\u0161t\u011bn spustiteln\u00fd soubor pro cryptomining Monero (byl pou\u017eit miner XMRig) a byla nainstalov\u00e1na knihovna pro odchyt\u00e1v\u00e1n\u00ed hesel. <\/p>\n

P\u0159i vytv\u00e1\u0159en\u00ed bal\u00ed\u010dku se \u0161kodliv\u00fdm k\u00f3dem do\u0161lo k chyb\u011b, kter\u00e1 zp\u016fsobila selh\u00e1n\u00ed instalace bal\u00ed\u010dku, a proto byla probl\u00e9m rychle odhalena a \u0161\u00ed\u0159en\u00ed \u0161kodliv\u00e9 aktualizace bylo zablokov\u00e1no v ran\u00e9 f\u00e1zi. U\u017eivateli se doporu\u010duje zajistit, \u017ee maj\u00ed nainstalovanou verzi coa 2.0.2, a pokud mo\u017eno p\u0159idat do package.json sv\u00fdch projekt\u016f vazbu na stabiln\u00ed verzi pro p\u0159\u00edpad op\u011btovn\u00e9ho kompromitov\u00e1n\u00ed. npm a yarn: «resolutions»: { «coa»: «2.0.2» }, pnpm: «pnpm»: { «overrides»: { «coa»: «2.0.2» } }
\n
Zdroj: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0443\u0434\u0430\u043b\u043e\u0441\u044c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 NPM-\u043f\u0430\u043a\u0435\u0442\u043e\u043c coa \u0438 \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u0442\u044c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f 2.0.3, 2.0.4, 2.1.1, 2.1.3 \u0438 3.1.3, \u0432\u043a\u043b\u044e\u0447\u0430\u044e\u0449\u0438\u0435 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f. \u041f\u0430\u043a\u0435\u0442 coa, \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0449\u0438\u0439 \u0444\u0443\u043d\u043a\u0446\u0438\u0438 \u0434\u043b\u044f \u0440\u0430\u0437\u0431\u043e\u0440\u0430 \u0430\u0440\u0433\u0443\u043c\u0435\u043d\u0442\u043e\u0432 \u043a\u043e\u043c\u0430\u043d\u0434\u043d\u043e\u0439 \u0441\u0442\u0440\u043e\u043a\u0438, \u043d\u0430\u0441\u0447\u0438\u0442\u044b\u0432\u0430\u0435\u0442 \u043e\u043a\u043e\u043b\u043e 9 \u043c\u043b\u043d \u0437\u0430\u0433\u0440\u0443\u0437\u043e\u043a \u0432 \u043d\u0435\u0434\u0435\u043b\u044e \u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0432 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u0438 \u0443 159 \u0434\u0440\u0443\u0433\u0438\u0445 NPM-\u043f\u0430\u043a\u0435\u0442\u043e\u0432, \u0432\u043a\u043b\u044e\u0447\u0430\u044f react-scripts \u0438 vue\/cli-service. \u0410\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0446\u0438\u044f NPM \u0443\u0436\u0435 \u0443\u0434\u0430\u043b\u0438\u043b\u0430 \u0432\u044b\u043f\u0443\u0441\u043a \u0441 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u043c\u0438 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-102213","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Do NPM bal\u00ed\u010dku coa, kter\u00fd m\u00e1 9 milion\u016f stahov\u00e1n\u00ed t\u00fddn\u011b, bylo vlo\u017eeno \u0161kodliv\u00e9 software | ProHoster","description":"\u00dato\u010dn\u00edk\u016fm se poda\u0159ilo z\u00edskat kontrolu nad NPM bal\u00ed\u010dkem coa a vydat aktualizace 2.0.3, 2.0.4, 2.1.1, 2.1.3 a 3.1.3, kter\u00e9 obsahuj\u00ed \u0161kodliv\u00e9 \u00fapravy.","canonical_url":"https:\/\/prohoster.info\/cs\/blog\/news\/v-npm-paket-coa-naschityvayushhij-9-mln-zagruzok-v-nedelyu-vnedreno-vredonosnoe-po","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"cs_CZ","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0412 NPM-\u043f\u0430\u043a\u0435\u0442 coa, \u043d\u0430\u0441\u0447\u0438\u0442\u044b\u0432\u0430\u044e\u0449\u0438\u0439 9 \u043c\u043b\u043d \u0437\u0430\u0433\u0440\u0443\u0437\u043e\u043a \u0432 \u043d\u0435\u0434\u0435\u043b\u044e, \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u043e \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0435 \u041f\u041e | ProHoster","og:description":"\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0443\u0434\u0430\u043b\u043e\u0441\u044c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 NPM-\u043f\u0430\u043a\u0435\u0442\u043e\u043c coa \u0438 \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u0442\u044c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f 2.0.3, 2.0.4, 2.1.1, 2.1.3 \u0438 3.1.3, \u0432\u043a\u043b\u044e\u0447\u0430\u044e\u0449\u0438\u0435 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f.","og:url":"https:\/\/prohoster.info\/cs\/blog\/news\/v-npm-paket-coa-naschityvayushhij-9-mln-zagruzok-v-nedelyu-vnedreno-vredonosnoe-po","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2021-11-05T01:36:51+00:00","article:modified_time":"2021-11-05T01:36:51+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"102213","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-11-05 01:37:53","updated":"2022-10-05 02:11:26","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/102213","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/comments?post=102213"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/102213\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/media?parent=102213"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/categories?post=102213"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/tags?post=102213"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}