An gano fakitin ɓarna guda uku klow, klown da okhsa a cikin ma'ajiyar NPM, waɗanda, ɓoye bayan ayyuka don tantance taken mai amfani-Agent (an yi amfani da kwafin ɗakin karatu na UA-Parser-js), ya ƙunshi canje-canje masu cutarwa da aka yi amfani da su don tsara ma'adinan cryptocurrency. akan tsarin mai amfani. Wani mai amfani ne ya buga fakitin a ranar 15 ga Oktoba, amma nan da nan masu bincike na ɓangare na uku suka gano su waɗanda suka kai rahoton matsalar ga gwamnatin NPM. Sakamakon haka, an cire fakitin a cikin rana ɗaya da aka buga, amma an sami nasarar saukar da kusan 150.
Lambar ƙeta kai tsaye ta ƙunshi kawai a cikin fakitin "klow" da "klown", waɗanda aka yi amfani da su azaman abin dogaro a cikin kunshin okhsa. Kunshin "okhsa" kuma ya haɗa da stub don gudanar da kalkuleta akan Windows. Dangane da dandamali na yanzu, an zazzage fayil ɗin aiwatarwa don hakar ma'adinai kuma an ƙaddamar da shi akan tsarin mai amfani daga mai masaukin waje. An shirya ginin ma'adinai akan Linux, macOS da Windows. A lokacin farawa, an watsa adadin tafkin don hakar ma'adinai na haɗin gwiwa, adadin walat ɗin crypto da adadin adadin CPU don yin lissafin.
source: budenet.ru