NPM repository suav nrog qhov yuav tsum tau muaj ob qhov kev lees paub tseeb rau cov nyiaj khaws cia 500 NPM pob khoom nrov tshaj plaws. Tus naj npawb ntawm cov pob khoom siv tau raug siv los ua qhov muaj npe nrov. Cov neeg saib xyuas ntawm cov pob khoom uas tau teev tseg tsuas yog tuaj yeem ua cov haujlwm hloov kho ntsig txog ntawm lub chaw cia khoom tsuas yog tom qab ua kom muaj ob qhov kev lees paub tseeb, uas yuav tsum tau nkag mus rau kev lees paub siv ib zaug passwords (TOTP) tsim los ntawm cov ntawv thov xws li Authy, Google Authenticator thiab FreeOTP, lossis hardware keys thiab biometric scanners, txhawb nqa WebAuth raws tu qauv.
Qhov no yog theem peb ntawm kev ntxiv dag zog rau NPM txoj kev tiv thaiv kev cuam tshuam tus account. Thawj theem koom nrog hloov tag nrho cov nyiaj NPM uas tsis muaj ob qhov kev lees paub tseeb tau siv los siv kev txheeb xyuas tus lej qib siab, uas yuav tsum tau nkag mus rau ib lub sijhawm xa los ntawm email thaum sim nkag mus rau npmjs.com lossis ua qhov kev lees paub hauv npm khoom siv. Nyob rau theem thib ob, qhov yuav tsum tau muaj ob qhov kev lees paub tseeb tau qhib rau 100 pob nrov tshaj plaws.
Cia peb nco ntsoov tias raws li kev tshawb fawb tau ua nyob rau xyoo 2020, tsuas yog 9.27% ntawm cov neeg saib xyuas pob siv ob qhov kev lees paub los tiv thaiv kev nkag mus, thiab hauv 13.37% ntawm cov neeg mob, thaum sau npe cov nyiaj tshiab, cov neeg tsim khoom sim rov siv cov passwords cuam tshuam uas tshwm sim hauv kev paub. password leaks. Thaum lub sij hawm soj ntsuam kev ruaj ntseg lo lus zais, 12% ntawm NPM cov nyiaj (13% ntawm cov pob khoom) tau nkag mus vim yog siv cov passwords uas xav tau thiab tsis tseem ceeb xws li "123456." Ntawm cov teeb meem yog 4 tus neeg siv nyiaj los ntawm Top 20 cov pob nrov tshaj plaws, 13 cov nyiaj nrog cov pob rub tawm ntau dua 50 lab lub sijhawm hauv ib hlis, 40 nrog ntau dua 10 lab rub tawm hauv ib hlis, thiab 282 nrog ntau dua 1 lab rub tawm ib hlis. Muab rau hauv tus account lub loading ntawm modules raws li ib tug saw ntawm dependencies, kev cuam tshuam ntawm cov nyiaj tsis ntseeg yuav cuam tshuam txog li 52% ntawm tag nrho cov modules hauv NPM.
Tau qhov twg los: opennet.ru