V repozit\u00e1\u0159i NPM byla zavedena povinn\u00e1 dvoufaktorov\u00e1 autentizace pro \u00fa\u010dty spr\u00e1vc\u016f 500 nejpopul\u00e1rn\u011bj\u0161\u00edch bal\u00ed\u010dk\u016f NPM. Jako krit\u00e9rium popularity byla pou\u017eita po\u010det z\u00e1visl\u00fdch bal\u00ed\u010dk\u016f. Spr\u00e1vci bal\u00ed\u010dk\u016f, kter\u00e9 se dostaly na seznam, budou moci prov\u00e1d\u011bt souvisej\u00edc\u00ed operace s repozit\u00e1\u0159em pouze po aktivaci dvoufaktorov\u00e9 autentizace, kter\u00e1 vy\u017eaduje potvrzen\u00ed p\u0159ihl\u00e1\u0161en\u00ed pomoc\u00ed jednor\u00e1zov\u00fdch hesel (TOTP), generovan\u00fdch aplikacemi jako Authy, Google Authenticator a FreeOTP, nebo hardwarov\u00fdmi kl\u00ed\u010di a biometrick\u00fdmi skenery podporuj\u00edc\u00edmi protokol WebAuth. <\/p>\n
To je t\u0159et\u00ed f\u00e1ze pos\u00edlen\u00ed ochrany NPM proti kompromitaci \u00fa\u010dt\u016f. V prvn\u00ed f\u00e1zi byly v\u0161echny \u00fa\u010dty NPM, pro kter\u00e9 nen\u00ed povolena dvoufaktorov\u00e1 autentizace, p\u0159evedeny na pou\u017eit\u00ed roz\u0161\u00ed\u0159en\u00e9 verifikace \u00fa\u010dt\u016f, kter\u00e1 vy\u017eaduje zad\u00e1n\u00ed jednor\u00e1zov\u00e9ho k\u00f3du zaslan\u00e9ho na e-mail p\u0159i pokusu o p\u0159ihl\u00e1\u0161en\u00ed na str\u00e1nk\u00e1ch npmjs.com nebo prov\u00e1d\u011bn\u00ed autentizovan\u00fdch operac\u00ed v n\u00e1stroji npm. V druh\u00e9 f\u00e1zi byla povinn\u00e1 dvoufaktorov\u00e1 autentizace zavedena pro 100 nejpopul\u00e1rn\u011bj\u0161\u00edch bal\u00ed\u010dk\u016f. <\/p>\n
P\u0159ipom\u00edn\u00e1me, \u017ee podle v\u00fdzkumu proveden\u00e9ho v roce 2020 pouze 9,27 % spr\u00e1vce bal\u00ed\u010dk\u016f pou\u017e\u00edvalo dvoufaktorovou autentizaci pro ochranu p\u0159\u00edstupu, a v 13,37 % p\u0159\u00edpad\u016f se p\u0159i registraci nov\u00fdch \u00fa\u010dt\u016f pokou\u0161eli v\u00fdvoj\u00e1\u0159i znovu pou\u017e\u00edvat kompromitovan\u00e9 hesla, kter\u00e1 figurovala v zn\u00e1m\u00fdch \u00fanik\u00e1ch hesel. B\u011bhem kontroly bezpe\u010dnosti pou\u017e\u00edvan\u00fdch hesel se poda\u0159ilo z\u00edskat p\u0159\u00edstup k 12 % \u00fa\u010dt\u016f na NPM (13 % bal\u00ed\u010dk\u016f) kv\u016fli pou\u017e\u00edv\u00e1n\u00ed p\u0159edv\u00eddateln\u00fdch a trivi\u00e1ln\u00edch hesel, jako je \u201e123456\u201c. Mezi problematick\u00fdmi se nach\u00e1zely 4 \u00fa\u010dty u\u017eivatel\u016f z Top 20 nejpopul\u00e1rn\u011bj\u0161\u00edch bal\u00ed\u010dk\u016f, 13 \u00fa\u010dt\u016f, jejich\u017e bal\u00ed\u010dky byly stahov\u00e1ny v\u00edce ne\u017e 50 milionkr\u00e1t za m\u011bs\u00edc, 40 bal\u00ed\u010dk\u016f s v\u00edce ne\u017e 10 miliony sta\u017een\u00ed za m\u011bs\u00edc a 282 s v\u00edce ne\u017e 1 milionem sta\u017een\u00ed za m\u011bs\u00edc. Vzhledem k na\u010d\u00edt\u00e1n\u00ed modul\u016f prost\u0159ednictv\u00edm \u0159et\u011bzcov\u00fdch z\u00e1vislost\u00ed mohla kompromitace nespolehliv\u00fdch \u00fa\u010dt\u016f zas\u00e1hnout a\u017e 52 % v\u0161ech modul\u016f v NPM. \u0412 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0438 NPM \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u043e \u043f\u0440\u0438\u043c\u0435\u043d\u0435\u043d\u0438\u0435 \u043e\u0431\u044f\u0437\u0430\u0442\u0435\u043b\u044c\u043d\u043e\u0439 \u0434\u0432\u0443\u0445\u0444\u0430\u043a\u0442\u043e\u0440\u043d\u043e\u0439 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0434\u043b\u044f \u0443\u0447\u0451\u0442\u043d\u044b\u0445 \u0437\u0430\u043f\u0438\u0441\u0435\u0439 \u0441\u043e\u043f\u0440\u043e\u0432\u043e\u0436\u0434\u0430\u044e\u0449\u0438\u0445 500 \u0441\u0430\u043c\u044b\u0445 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u044b\u0445 NPM-\u043f\u0430\u043a\u0435\u0442\u043e\u0432. \u0412 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u043a\u0440\u0438\u0442\u0435\u0440\u0438\u044f \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u0441\u0442\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u043e \u0447\u0438\u0441\u043b\u043e \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u044b\u0445 \u043f\u0430\u043a\u0435\u0442\u043e\u0432. \u0421\u043e\u043f\u0440\u043e\u0432\u043e\u0436\u0434\u0430\u044e\u0449\u0438\u0435 \u043f\u043e\u043f\u0430\u0432\u0448\u0438\u0445 \u0432 \u0441\u043f\u0438\u0441\u043e\u043a \u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u0441\u043c\u043e\u0433\u0443\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0435 \u0441 \u0432\u043d\u0435\u0441\u0435\u043d\u0438\u0435\u043c \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0439 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0438 \u0441 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0435\u043c \u0442\u043e\u043b\u044c\u043a\u043e \u043f\u043e\u0441\u043b\u0435 \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f \u0434\u0432\u0443\u0445\u0444\u0430\u043a\u0442\u043e\u0440\u043d\u043e\u0439 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438, \u0442\u0440\u0435\u0431\u0443\u044e\u0449\u0435\u0439 \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0438\u044f \u0432\u0445\u043e\u0434\u0430 \u043f\u0440\u0438 \u043f\u043e\u043c\u043e\u0449\u0438 \u043e\u0434\u043d\u043e\u0440\u0430\u0437\u043e\u0432\u044b\u0445 \u043f\u0430\u0440\u043e\u043b\u0435\u0439 (TOTP), \u0433\u0435\u043d\u0435\u0440\u0438\u0440\u0443\u0435\u043c\u044b\u0445 \u0442\u0430\u043a\u0438\u043c\u0438 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f\u043c\u0438, \u043a\u0430\u043a […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-104203","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47V NPM je zavedeno povinn\u00e9 dvoufaktorov\u00e9 ov\u011b\u0159ov\u00e1n\u00ed pro 500 nejpopul\u00e1rn\u011bj\u0161\u00edch bal\u00ed\u010dk\u016f | ProHoster","description":"V repozit\u00e1\u0159i NPM bylo zavedeno povinn\u00e9 dvoufaktorov\u00e9 ov\u011b\u0159ov\u00e1n\u00ed pro \u00fa\u010dty, kter\u00e9 spravuj\u00ed 500 nejpopul\u00e1rn\u011bj\u0161\u00edch NPM bal\u00ed\u010dk\u016f.","canonical_url":"https:\/\/prohoster.info\/cs\/blog\/news\/v-npm-vklyuchena-obyazatelnaya-dvuhfaktornaya-autentifikacziya-dlya-500-samyh-populyarnyh-paketov","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"cs_CZ","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0412 NPM \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u0430 \u043e\u0431\u044f\u0437\u0430\u0442\u0435\u043b\u044c\u043d\u0430\u044f \u0434\u0432\u0443\u0445\u0444\u0430\u043a\u0442\u043e\u0440\u043d\u0430\u044f \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044f \u0434\u043b\u044f 500 \u0441\u0430\u043c\u044b\u0445 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u044b\u0445 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 | ProHoster","og:description":"\u0412 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0438 NPM \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u043e \u043f\u0440\u0438\u043c\u0435\u043d\u0435\u043d\u0438\u0435 \u043e\u0431\u044f\u0437\u0430\u0442\u0435\u043b\u044c\u043d\u043e\u0439 \u0434\u0432\u0443\u0445\u0444\u0430\u043a\u0442\u043e\u0440\u043d\u043e\u0439 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0434\u043b\u044f \u0443\u0447\u0451\u0442\u043d\u044b\u0445 \u0437\u0430\u043f\u0438\u0441\u0435\u0439 \u0441\u043e\u043f\u0440\u043e\u0432\u043e\u0436\u0434\u0430\u044e\u0449\u0438\u0445 500 \u0441\u0430\u043c\u044b\u0445 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u044b\u0445 NPM-\u043f\u0430\u043a\u0435\u0442\u043e\u0432.","og:url":"https:\/\/prohoster.info\/cs\/blog\/news\/v-npm-vklyuchena-obyazatelnaya-dvuhfaktornaya-autentifikacziya-dlya-500-samyh-populyarnyh-paketov","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2022-06-01T07:37:06+00:00","article:modified_time":"2022-06-01T07:37:06+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"104203","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-25 11:25:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2022-06-01 07:38:16","updated":"2026-01-25 11:25:19","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/104203","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/comments?post=104203"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/104203\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/media?parent=104203"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/categories?post=104203"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/tags?post=104203"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}
\n
Zdroj: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"