{"id":104172,"date":"2022-05-27T21:36:38","date_gmt":"2022-05-27T19:36:38","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/github-raskryl-dannye-o-vzlome-infrastruktury-npm-i-vyyavlenii-otkrytyh-parolej-v-logah"},"modified":"2022-05-27T21:36:38","modified_gmt":"2022-05-27T19:36:38","slug":"github-raskryl-dannye-o-vzlome-infrastruktury-npm-i-vyyavlenii-otkrytyh-parolej-v-logah","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/news\/github-raskryl-dannye-o-vzlome-infrastruktury-npm-i-vyyavlenii-otkrytyh-parolej-v-logah","title":{"rendered":"GitHub avalikustas andmed NPM infrastruktuuri h\u00e4kimise ning avatud paroolide tuvastamise kohta logides.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

GitHub teatas r\u00fcnnaku anal\u00fc\u00fcsi tulemustest, mille k\u00e4igus said kurjategijad 12. aprillil juurdep\u00e4\u00e4su Amazoni AWS teenuses kasutatavatele pilviinfrahhi t\u00f6\u00f6le, mis on seotud NPM projektiga. Juhtumi anal\u00fc\u00fcs n\u00e4itas, et r\u00fcndajad p\u00e4\u00e4sesid ligi skidmd.npmjs.com hosti varukoopiatele, sealhulgas 2015. aasta seisuga ligikaudu 100 000 NPM kasutaja autentimisandmetega varukoopiale, mille hulka kuuluvad paroolide r\u00e4sid, nimed ja e-posti aadressid. <\/p>\n

Paroolide r\u00e4sid loodi PBKDF2 v\u00f5i SHA1 algoritmide abil soolaga, mis 2017. aastal asendati brute-force r\u00fcnnakute suhtes tugevama bcrypt algoritmiga. Incidendi tuvastamisel t\u00fchistati lekkega seotud paroolid ja kasutajatele saadeti teated uue parooli seadistamise vajadusest. Kuna NPM-is on alates 1. m\u00e4rtsist rakendatud kohustuslik kahefaktoriline autentimine e-kirja kinnitamisega, peetakse kasutajate kompromiteerimise ohtu minimaalseks. <\/p>\n

Lisaks langesid r\u00fcndajate k\u00e4tte k\u00f5ik manifestifailid ja privaatsete pakettide metaandmed aprilli 2021. aasta seisuga, CSV-failid, mis sisaldavad ajakohast nimekirja k\u00f5ikidest privaatsete pakettide nimedest ja versioonidest, samuti kahe GitHubi kliendi privaatsete pakettide kogu sisu (nimed ei ole avalikustatud). Mis puudutab iseennast hoidlat, siis j\u00e4lgede anal\u00fc\u00fcs ja pakettide r\u00e4sim\u00e4rkide kinnitamine ei tuvastanud r\u00fcndajate muudatusi NPM-pakettides ega valeversioonide avaldamist. <\/p>\n

R\u00fcnnak tehti 12. aprillil varastatud OAuth tokenite abil, mis olid genereeritud kahte kolmanda osapoole GitHubi integreerijat \u2014 Heroku ja Travis-CI jaoks. Kahjustades tokenit, suudavad r\u00fcndajad hankida privaatsetest GitHubi hoidlatest Amazon Web Servicesi API juurdep\u00e4\u00e4suv\u00f5tme, mida kasutati NPM projekti infrastruktuuris. Saadud v\u00f5ti v\u00f5imaldas p\u00e4\u00e4seda AWS S3 teenusesse talletatud andmetele. <\/p>\n

Lisaks avaldati teavet varem tuvastatud t\u00f5siste privaatsusprobleemide kohta, mis on seotud kasutajate andmete t\u00f6\u00f6tlemisega. serverites<\/a> NPM \u2014 siselogides salvestati avatud kujul m\u00f5nede NPM kasutajate paroolid ning juurdep\u00e4\u00e4sutokenid NPM-ile. NPM-i integreerimisel GitHubi logimist s\u00fcsteemi ei tagatud konfidentsiaalse teabe eemaldamist NPM teenustele tehtud logimise taotlustest. V\u00e4idetakse, et probleem lahendati ja logid puhastati juba enne NPM-i vastu suunatud r\u00fcnnakut. Logidele, mis sisaldasid avalikke parooli, omasid juurdep\u00e4\u00e4su vaid m\u00f5ned GitHubi t\u00f6\u00f6tajad.
\n
Allikas: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f GitHub \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u044b \u0440\u0430\u0437\u0431\u043e\u0440\u0430 \u0430\u0442\u0430\u043a\u0438, \u0432 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 12 \u0430\u043f\u0440\u0435\u043b\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0438 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043e\u0431\u043b\u0430\u0447\u043d\u044b\u043c \u043e\u043a\u0440\u0443\u0436\u0435\u043d\u0438\u044f\u043c \u0432 \u0441\u0435\u0440\u0432\u0438\u0441\u0435 Amazon AWS, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u043c \u0432 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0435 \u043f\u0440\u043e\u0435\u043a\u0442\u0430 NPM. \u0410\u043d\u0430\u043b\u0438\u0437 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430 \u043f\u043e\u043a\u0430\u0437\u0430\u043b, \u0447\u0442\u043e \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0435 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0438 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0440\u0435\u0437\u0435\u0440\u0432\u043d\u044b\u043c \u043a\u043e\u043f\u0438\u044f\u043c \u0445\u043e\u0441\u0442\u0430 skimdb.npmjs.com \u0438 \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 \u043a \u0440\u0435\u0437\u0435\u0440\u0432\u043d\u043e\u0439 \u043a\u043e\u043f\u0438\u0438 \u0411\u0414 \u0441 \u0443\u0447\u0451\u0442\u043d\u044b\u043c\u0438 \u0434\u0430\u043d\u043d\u044b\u043c\u0438 \u043f\u0440\u0438\u043c\u0435\u0440\u043d\u043e 100 \u0442\u044b\u0441\u044f\u0447 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 NPM \u043f\u043e […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-104172","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47GitHub paljastas NPM infrastruktuuri h\u00e4kkimise andmed ja avatud paroolide leidmise logides | ProHoster","description":"Ettev\u00f5te GitHub avaldas r\u00fcnnaku uurimise tulemused, mille k\u00e4igus said kurjategijad 12. aprillil juurdep\u00e4\u00e4su pilveteenustele Amazon AWS-is, mis on kasutusel NPM projekti infrastruktuuris.","canonical_url":"https:\/\/prohoster.info\/et\/blog\/news\/github-raskryl-dannye-o-vzlome-infrastruktury-npm-i-vyyavlenii-otkrytyh-parolej-v-logah","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47GitHub \u0440\u0430\u0441\u043a\u0440\u044b\u043b \u0434\u0430\u043d\u043d\u044b\u0435 \u043e \u0432\u0437\u043b\u043e\u043c\u0435 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b NPM \u0438 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u0438 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u0445 \u043f\u0430\u0440\u043e\u043b\u0435\u0439 \u0432 \u043b\u043e\u0433\u0430\u0445 | ProHoster","og:description":"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f GitHub \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u044b \u0440\u0430\u0437\u0431\u043e\u0440\u0430 \u0430\u0442\u0430\u043a\u0438, \u0432 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 12 \u0430\u043f\u0440\u0435\u043b\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0438 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043e\u0431\u043b\u0430\u0447\u043d\u044b\u043c \u043e\u043a\u0440\u0443\u0436\u0435\u043d\u0438\u044f\u043c \u0432 \u0441\u0435\u0440\u0432\u0438\u0441\u0435 Amazon AWS, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u043c \u0432 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0435 \u043f\u0440\u043e\u0435\u043a\u0442\u0430 NPM.","og:url":"https:\/\/prohoster.info\/et\/blog\/news\/github-raskryl-dannye-o-vzlome-infrastruktury-npm-i-vyyavlenii-otkrytyh-parolej-v-logah","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2022-05-27T19:36:38+00:00","article:modified_time":"2022-05-27T19:36:38+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"104172","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-25 11:20:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2022-05-27 19:36:53","updated":"2026-01-25 11:20:19","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/104172","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=104172"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/104172\/revisions"}],"predecessor-version":[{"id":164417,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/104172\/revisions\/164417"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=104172"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=104172"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=104172"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}