An gano fakiti huɗu a cikin ma'ajiyar NPM waɗanda ke tura bayanan mai amfani

A cikin ma'ajiyar NPM gano munanan ayyuka a cikin fakiti huɗu, gami da rubutun da aka riga aka shigar, wanda, kafin shigar da fakitin, ya aika da sharhi zuwa GitHub tare da bayani game da adireshin IP na mai amfani, wurin, shiga, ƙirar CPU, da kundin gida. An sami lambar mugunta a cikin fakiti zaɓe (255 zazzagewa), lodashs (78 zazzagewa), loadyaml (48 zazzagewa) kuma loadyml (zazzagewa 37).

An gano fakiti huɗu a cikin ma'ajiyar NPM waɗanda ke tura bayanan mai amfani

An buga fakitin matsala zuwa NPM daga 17 ga Agusta zuwa 24 ga Agusta don rarraba ta amfani da su nau'in nau'i, i.e. tare da ba da sunaye masu kama da sunayen sauran manyan ɗakunan karatu tare da tsammanin cewa mai amfani zai yi typo lokacin buga sunan ko kuma ba zai lura da bambance-bambance ba lokacin zabar module daga jerin. Idan aka yi la’akari da adadin abubuwan da aka zazzagewa, masu amfani da su kusan 400 ne suka fadi don wannan dabarar, mafi yawansu sun rikita masu zaɓe da lantarki. A halin yanzu kunshin zaɓe da loadyaml riga cire ta gwamnatin NPM, kuma marubucin ya cire fakitin lodashs da loadyml.

Ba a san dalilan maharan ba, amma ana kyautata zaton cewa bayanan sun taso ta hanyar GitHub (an aiko da sharhin ta hanyar Batun kuma an share shi a cikin sa'o'i XNUMX) ana iya aiwatar da shi yayin gwaji don kimanta tasirin hanyar, ko kuma An shirya harin a matakai da yawa, a farkon wanda aka tattara bayanan wadanda aka kashe, kuma a karo na biyu, wanda ba a aiwatar da shi ba saboda toshewa, maharan sun yi niyya don sakin sabuntawa wanda zai haɗa da lambar ɓarna mafi haɗari ko kuma bayan gida a cikin. sabuwar saki.

source: budenet.ru

Add a comment