{"id":113035,"date":"2024-01-21T23:28:08","date_gmt":"2024-01-21T21:28:08","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/8-2-naibolee-populyarnyh-zagruzok-v-npm-prihoditsya-na-ustarevshie-pakety"},"modified":"2024-01-21T23:28:08","modified_gmt":"2024-01-21T21:28:08","slug":"8-2-naibolee-populyarnyh-zagruzok-v-npm-prihoditsya-na-ustarevshie-pakety","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/news\/8-2-naibolee-populyarnyh-zagruzok-v-npm-prihoditsya-na-ustarevshie-pakety","title":{"rendered":"8.2% k\u00f5ige populaarsematest allalaadimistest NPM-is j\u00e4\u00e4b aegunud paketidele","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Aqua Security teadlased avaldasid anal\u00fc\u00fcsi tulemused 50 000 k\u00f5ige allalaaditud paketi kohta NPM-i hoidlas. 7500 (15%) k\u00f5ige allalaaditud paketist olid seotud aegunud pakettide ja l\u00f5petatud projektidega. Aegunud s\u00f5ltuvuste tuvastamise lihtsustamiseks oma projektis pakuti v\u00e4lja t\u00f6\u00f6riist Dependency-Deprecated-Checker, mis on avaldatud MIT litsentsi alusel. <\/p>\n

4100 (8.2%) vaadeldud paketti s\u00f5ltuvuste ahelas sisaldavad pakette, mis on ametlikult NPM-is aegunud v\u00f5i seotud aegunud projektidega (n\u00e4iteks on pakett request m\u00e4rgitud aegunuks, kuid seda kasutatakse endiselt 55000 paketi otse s\u00f5ltuvusena). 2300 (4.6%) paketti on seotud GitHubi hoidlatega, mis on muudetud arhiivideks (arendamine l\u00f5petatud, n\u00e4iteks on paketi l\u00e4bi hoidla m\u00e4rgitud arhiiviks, kuid kasutatakse 3000 paketi otse s\u00f5ltuvusena). 1100 (2.2%) paketti viitavad juba mitteeksisteerivatele hoidlatele, millele viitamine toob kaasa 404 veateate. 3100 (6.2%) paketti ei sisalda teavet hoidla kohta.

\"8.2%<\/center> <\/p>\n

Aegunud pakettide ja hoidlate puudumisega pakettide levikut NPM-is on absoluutsetes numbrites ekstrapoleeritud umbes 2.1 miljardile allalaadimisele n\u00e4dalas. Aegunud ja hoolduseta projektide kasutamine s\u00f5ltuvustena on seotud riskiga, et neid sisaldavad paketid v\u00f5ivad sisaldada parandamata haavatavusi, eriti arvestades m\u00f5ne arendaja praktikat varjatud haavatavuste k\u00f5rvaldamiseks, millele ei antud CVE-id ja millele ei osutatud selges\u00f5naliselt.
\n
Allikas: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u0437 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Aqua Security \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0438 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u044b \u0430\u043d\u0430\u043b\u0438\u0437\u0430 \u0441\u0442\u0430\u0442\u0438\u0441\u0442\u0438\u043a\u0438 \u043e 50 \u0442\u044b\u0441\u044f\u0447\u0430\u0445 \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0435\u043c\u044b\u0445 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u0432 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0438 NPM. 7500 (15%) \u0438\u0437 \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0435\u043c\u044b\u0445 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u043e\u043a\u0430\u0437\u0430\u043b\u0438\u0441\u044c \u0441\u0432\u044f\u0437\u0430\u043d\u044b \u0441 \u0443\u0441\u0442\u0430\u0440\u0435\u0432\u0448\u0438\u043c\u0438 \u043f\u0430\u043a\u0435\u0442\u0430\u043c\u0438 \u0438 \u043f\u0440\u0435\u043a\u0440\u0430\u0442\u0438\u0432\u0448\u0438\u043c\u0438 \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043e\u0432\u0430\u043d\u0438\u0435 \u043f\u0440\u043e\u0435\u043a\u0442\u0430\u043c\u0438. \u0414\u043b\u044f \u0443\u043f\u0440\u043e\u0449\u0435\u043d\u0438\u044f \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u0438\u044f \u0443\u0441\u0442\u0430\u0440\u0435\u0432\u0448\u0438\u0445 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u0441\u0440\u0435\u0434\u0438 \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0445 \u0432 \u0441\u0432\u043e\u0451\u043c \u043f\u0440\u043e\u0435\u043a\u0442\u0435, \u043f\u0440\u0435\u0434\u043b\u043e\u0436\u0435\u043d\u0430 \u0443\u0442\u0438\u043b\u0438\u0442\u0430 Dependency-Deprecated-Checker, \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u043d\u0430\u044f \u043f\u043e\u0434 \u043b\u0438\u0446\u0435\u043d\u0437\u0438\u0435\u0439 MIT. \u0412 4100 (8.2%) \u0440\u0430\u0441\u0441\u043c\u043e\u0442\u0440\u0435\u043d\u043d\u044b\u0445 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":113036,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-113035","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd478.2% k\u00f5ige populaarsematest allalaadimistest NPM-is kuulub aegunud paketidele | ProHoster","description":"Aqua Security teadlased avaldasid anal\u00fc\u00fcsi tulemused 50 000 k\u00f5ige allalaaditud paketi kohta NPM-i hoidlas.","canonical_url":"https:\/\/prohoster.info\/et\/blog\/news\/8-2-naibolee-populyarnyh-zagruzok-v-npm-prihoditsya-na-ustarevshie-pakety","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd478.2% \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u044b\u0445 \u0437\u0430\u0433\u0440\u0443\u0437\u043e\u043a \u0432 NPM \u043f\u0440\u0438\u0445\u043e\u0434\u0438\u0442\u0441\u044f \u043d\u0430 \u0443\u0441\u0442\u0430\u0440\u0435\u0432\u0448\u0438\u0435 \u043f\u0430\u043a\u0435\u0442\u044b | ProHoster","og:description":"\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u0437 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Aqua Security \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0438 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u044b \u0430\u043d\u0430\u043b\u0438\u0437\u0430 \u0441\u0442\u0430\u0442\u0438\u0441\u0442\u0438\u043a\u0438 \u043e 50 \u0442\u044b\u0441\u044f\u0447\u0430\u0445 \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0435\u043c\u044b\u0445 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u0432 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0438 NPM.","og:url":"https:\/\/prohoster.info\/et\/blog\/news\/8-2-naibolee-populyarnyh-zagruzok-v-npm-prihoditsya-na-ustarevshie-pakety","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2024-01-21T21:28:08+00:00","article:modified_time":"2024-01-21T21:28:08+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/113035","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=113035"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/113035\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media\/113036"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=113035"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=113035"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=113035"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}