{"id":92713,"date":"2020-08-29T19:42:59","date_gmt":"2020-08-29T17:42:59","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/v-npm-pakete-fallguys-vyyavlena-vredonosnaya-aktivnost"},"modified":"2020-08-29T19:42:59","modified_gmt":"2020-08-29T17:42:59","slug":"v-npm-pakete-fallguys-vyyavlena-vredonosnaya-aktivnost","status":"publish","type":"post","link":"https:\/\/prohoster.info\/de\/blog\/news\/v-npm-pakete-fallguys-vyyavlena-vredonosnaya-aktivnost","title":{"rendered":"Im NPM-Paket fallguys wurde sch\u00e4dliche Aktivit\u00e4t festgestellt.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>Die NPM-Entwickler <noindex><a rel=\"nofollow\" href=\"https:\/\/www.npmjs.com\/advisories\/1552\">haben gewarnt<\/a><\/noindex> vor der Entfernung des Pakets <noindex><a rel=\"nofollow\" href=\"https:\/\/www.npmjs.com\/package\/fallguys\">fallguys<\/a><\/noindex> aus dem Repository aufgrund der festgestellten sch\u00e4dlichen Aktivit\u00e4t. Neben <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/Udxr\/fallGuys\/\">der Anzeige<\/a><\/noindex> ASCII-Grafiken mit dem Charakter aus dem Spiel \u201eFall Guys: Ultimate Knockout\u201c. Das genannte Modul enthielt Code, der versuchte, einige Systemdateien \u00fcber einen Webhook an den Messenger Discord zu \u00fcbertragen. Das Modul wurde Anfang August ver\u00f6ffentlicht, konnte jedoch nur 288 Downloads erzielen, bevor es blockiert wurde.<\/p>\n<p>Die sch\u00e4dliche Aktivit\u00e4t zielte darauf ab, Windows-Nutzer zu kompromittieren. \u00dcbertragen wurden folgende Dateien, darunter eine Datenbank mit dem Verlauf des Browsers auf Basis der Chromium-Engine und dem Discord-Client (es wird angenommen, dass das Modul in der Phase der Datensammlung \u00fcber Benutzer blockiert wurde und ein gef\u00e4hrlicherer sch\u00e4dlicher Code in einem der Updates geliefert werden k\u00f6nnte):<\/p>\n<ul>\n<li class=\"l\">   \/AppData\/Local\/Google\/Chrome\/User&#92;x20Data\/Default\/Local&#92;x20Storage\/leveldb\n<li class=\"l\">    \/AppData\/Roaming\/Opera&#92;x20Software\/Opera&#92;x20Stable\/Local&#92;x20Storage\/leveldb\n<li class=\"l\">    \/AppData\/Local\/Yandex\/YandexBrowser\/User&#92;x20Data\/Default\/Local&#92;x20Storage\/leveldb\n<li class=\"l\">    \/AppData\/Local\/BraveSoftware\/Brave-Browser\/User&#92;x20Data\/Default\/Local&#92;x20Storage\/leveldb\n<li class=\"l\">    \/AppData\/Roaming\/discord\/Local&#92;x20Storage\/leveldb\n<\/ul>\n<p><noindex><a rel=\"nofollow\" name=\"link\"><\/a><\/noindex><\/p>\n<p>Quelle: <a \ncontent=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=53621\">opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 NPM \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0434\u0438\u043b\u0438 \u043e\u0431 \u0443\u0434\u0430\u043b\u0435\u043d\u0438\u0438 \u0438\u0437 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u044f \u043f\u0430\u043a\u0435\u0442\u0430 fallguys \u0438\u0437-\u0437\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u0438 \u0432 \u043d\u0451\u043c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0439 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u0438. \u041f\u043e\u043c\u0438\u043c\u043e \u0432\u044b\u0432\u043e\u0434\u0430 \u0437\u0430\u0441\u0442\u0430\u0432\u043a\u0438 \u0432 ACSII-\u0433\u0440\u0430\u0444\u0438\u043a\u0435 \u0441 \u043f\u0435\u0440\u0441\u043e\u043d\u0430\u0436\u0435\u043c \u0438\u0433\u0440\u044b &#171;Fall Guys: Ultimate Knockout&#187;, \u0443\u043a\u0430\u0437\u0430\u043d\u043d\u044b\u0439 \u043c\u043e\u0434\u0443\u043b\u044c \u0432\u043a\u043b\u044e\u0447\u0430\u043b \u043a\u043e\u0434, \u043f\u044b\u0442\u0430\u044e\u0449\u0438\u0439\u0441\u044f \u043f\u0435\u0440\u0435\u0434\u0430\u0432\u0430\u0442\u044c \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u0447\u0435\u0440\u0435\u0437 webhook \u043a \u043c\u0435\u0441\u0441\u0435\u043d\u0434\u0436\u0435\u0440\u0443 Discord. \u041c\u043e\u0434\u0443\u043b\u044c \u0431\u044b\u043b \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d \u0432 \u043d\u0430\u0447\u0430\u043b\u0435 \u0430\u0432\u0433\u0443\u0441\u0442\u0430, \u043d\u043e \u0441\u0443\u043c\u0435\u043b \u043d\u0430\u0431\u0440\u0430\u0442\u044c \u043b\u0438\u0448\u044c 288 \u0437\u0430\u0433\u0440\u0443\u0437\u043e\u043a, \u043f\u0440\u0435\u0436\u0434\u0435 \u0447\u0435\u043c [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-92713","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.0.1 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 NPM \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0434\u0438\u043b\u0438 \u043e\u0431 \u0443\u0434\u0430\u043b\u0435\u043d\u0438\u0438 \u0438\u0437 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u044f \u043f\u0430\u043a\u0435\u0442\u0430\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/de\/blog\/news\/v-npm-pakete-fallguys-vyyavlena-vredonosnaya-aktivnost\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.0.1\" \/>\n\t\t<meta property=\"og:locale\" content=\"de_DE\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0412 NPM-\u043f\u0430\u043a\u0435\u0442\u0435 fallguys \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u0430\u044f \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 NPM \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0434\u0438\u043b\u0438 \u043e\u0431 \u0443\u0434\u0430\u043b\u0435\u043d\u0438\u0438 \u0438\u0437 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u044f \u043f\u0430\u043a\u0435\u0442\u0430\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/de\/blog\/news\/v-npm-pakete-fallguys-vyyavlena-vredonosnaya-aktivnost\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2020-08-29T17:42:59+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2020-08-29T17:42:59+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Im NPM-Paket fallguys wurde sch\u00e4dliche Aktivit\u00e4t entdeckt | ProHoster","description":"Die Entwickler von NPM haben vor der L\u00f6schung des Pakets aus dem Repository gewarnt.","canonical_url":"https:\/\/prohoster.info\/de\/blog\/news\/v-npm-pakete-fallguys-vyyavlena-vredonosnaya-aktivnost","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"de_DE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0412 NPM-\u043f\u0430\u043a\u0435\u0442\u0435 fallguys \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u0430\u044f \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c | ProHoster","og:description":"\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 NPM \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0434\u0438\u043b\u0438 \u043e\u0431 \u0443\u0434\u0430\u043b\u0435\u043d\u0438\u0438 \u0438\u0437 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u044f \u043f\u0430\u043a\u0435\u0442\u0430","og:url":"https:\/\/prohoster.info\/de\/blog\/news\/v-npm-pakete-fallguys-vyyavlena-vredonosnaya-aktivnost","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-08-29T17:42:59+00:00","article:modified_time":"2020-08-29T17:42:59+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"92713","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 12:02:26","updated":"2022-10-01 14:48:00","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/de\/wp-json\/wp\/v2\/posts\/92713","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/de\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/de\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/de\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/de\/wp-json\/wp\/v2\/comments?post=92713"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/de\/wp-json\/wp\/v2\/posts\/92713\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/de\/wp-json\/wp\/v2\/media?parent=92713"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/de\/wp-json\/wp\/v2\/categories?post=92713"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/de\/wp-json\/wp\/v2\/tags?post=92713"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}