{"id":102934,"date":"2022-01-10T15:36:46","date_gmt":"2022-01-10T13:36:47","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/%d1%80%d0%b0%d0%b7%d1%80%d0%b0%d0%b1%d0%be%d1%82%d1%87%d0%b8%d0%ba-%d0%b2%d0%bd%d1%91%d1%81-%d0%b4%d0%b5%d1%81%d1%82%d1%80%d1%83%d0%ba%d1%82%d0%b8%d0%b2%d0%bd%d1%8b%d0%b5-%d0%b8%d0%b7%d0%bc%d0%b5"},"modified":"2022-01-10T15:36:46","modified_gmt":"2022-01-10T13:36:47","slug":"%d1%80%d0%b0%d0%b7%d1%80%d0%b0%d0%b1%d0%be%d1%82%d1%87%d0%b8%d0%ba-%d0%b2%d0%bd%d1%91%d1%81-%d0%b4%d0%b5%d1%81%d1%82%d1%80%d1%83%d0%ba%d1%82%d0%b8%d0%b2%d0%bd%d1%8b%d0%b5-%d0%b8%d0%b7%d0%bc%d0%b5","status":"publish","type":"post","link":"https:\/\/prohoster.info\/hu\/blog\/news\/%d1%80%d0%b0%d0%b7%d1%80%d0%b0%d0%b1%d0%be%d1%82%d1%87%d0%b8%d0%ba-%d0%b2%d0%bd%d1%91%d1%81-%d0%b4%d0%b5%d1%81%d1%82%d1%80%d1%83%d0%ba%d1%82%d0%b8%d0%b2%d0%bd%d1%8b%d0%b5-%d0%b8%d0%b7%d0%bc%d0%b5","title":{"rendered":"A fejleszt\u0151 destrukt\u00edv v\u00e1ltoztat\u00e1sokat hajtott v\u00e9gre a 20 ezer projektben haszn\u00e1lt NPM csomagok, a colors \u00e9s a faker ter\u00e9n.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Marak Squires, a creator of popular packages such as colors (console coloring for node.js) and faker (a generator of fake data for input fields), which have 2.8 million and 25 million weekly downloads respectively, has released new versions of his products in the NPM repository and on GitHub that include destructive changes intentionally leading to failures during the build and execution stages of dependent projects. As a result of Marak's actions, many projects, including AWS CDK, that use these libraries have been disrupted \u2014 the colors library is a dependency for 18,953 projects, while faker is used in 2,571. <\/p>\n

The colors library code has been modified to add console output of the text 'LIBERTY LIBERTY LIBERTY' alongside an infinite loop that blocks the operation of dependent projects and produces a stream of distorted words 'tesing'. In the faker library, the repository contents have been deleted, and in the 'endgame' commit, .gitignore and .npmignore files were added to exclude project files, while the README content has been replaced with the question 'What really happened to Aaron Schwartz?'. Issues exist in versions colors 1.4.1+ and faker 6.6.6.

\"A<\/center> <\/p>\n

In response to the actions taken, GitHub has blocked Marak's access to his repositories (90 public + several private), while NPM rolled back the malicious version of the package. Meanwhile, the legality of GitHub's actions raises questions, as a developer's removal of code from one of their repositories cannot be seen as a violation of service rules. Moreover, the license text for the colors and faker packages clearly states the absence of any warranties or obligations regarding code functionality. <\/p>\n

Interestingly, the first warning about the cessation of development was published over a year ago. In September 2020, Marak lost all his possessions in a fire, after which he issued an ultimatum in early November, urging commercial companies using his projects to fund the continued development, or he would cease support, as he no longer intends to work for free. Prior to the incident, the last version of colors was released two years ago, while faker was updated nine months ago. <\/p>\n

Ami a destrukt\u00edv m\u00f3dos\u00edt\u00e1sok csomagokba val\u00f3 beilleszt\u00e9s\u00e9nek motiv\u00e1ci\u00f3it illeti, val\u00f3sz\u00edn\u0171, hogy Marak azt pr\u00f3b\u00e1lja megtan\u00edtani a v\u00e1llalatoknak, akik kihaszn\u00e1lj\u00e1k a szabad szoftver fejleszt\u0151i k\u00f6z\u00f6ss\u00e9g munk\u00e1j\u00e1t, de cser\u00e9be semmit nem adnak, vagy fel akarja h\u00edvni a figyelmet Aaron Swartz hal\u00e1l\u00e1nak k\u00f6r\u00fclm\u00e9nyeinek \u00fajragondol\u00e1s\u00e1ra. Aaron \u00f6ngyilkoss\u00e1got k\u00f6vetett el egy ellene ind\u00edtott b\u00fcntet\u0151elj\u00e1r\u00e1s ut\u00e1n, amely a JSTOR fizet\u0151s adatb\u00e1zisb\u00f3l sz\u00e1rmaz\u00f3 tudom\u00e1nyos cikkek m\u00e1sol\u00e1s\u00e1val kapcsolatos, hangs\u00falyozva a tudom\u00e1nyos publik\u00e1ci\u00f3k szabad hozz\u00e1f\u00e9r\u00e9s\u00e9nek fontoss\u00e1g\u00e1t. Aaron sz\u00e1m\u00edt\u00f3g\u00e9pes csal\u00e1ssal \u00e9s v\u00e9dett sz\u00e1m\u00edt\u00f3g\u00e9pr\u0151l t\u00f6rt\u00e9n\u0151 jogtalan inform\u00e1ci\u00f3szerz\u00e9ssel v\u00e1dolt\u00e1k, amely\u00e9rt a maxim\u00e1lis b\u00fcntet\u00e9s 50 \u00e9v b\u00f6rt\u00f6n \u00e9s egymilli\u00f3 doll\u00e1ros b\u00edrs\u00e1g volt (ha a b\u00edr\u00f3s\u00e1gi meg\u00e1llapod\u00e1st elfogadta volna \u00e9s elismerte a v\u00e1dat, 6 h\u00f3napot kellett volna b\u00f6rt\u00f6nben t\u00f6ltenie). <\/p>\n

\u00dagy tartj\u00e1k, hogy Aaron, a depresszi\u00f3val k\u00fczdve, nem b\u00edrta el a b\u00edr\u00f3s\u00e1gi rendszer nyom\u00e1s\u00e1t \u00e9s az el\u00e9gtelen v\u00e1dak igazs\u00e1gtalans\u00e1g\u00e1t (csak az\u00e9rt fenyegette 50 \u00e9v b\u00f6rt\u00f6n, mert let\u00f6lt\u00f6tte a tudom\u00e1nyos cikkek adatb\u00e1zis\u00e1nak tartalm\u00e1t, amely szerinte korl\u00e1toz\u00e1s n\u00e9lk\u00fcl kellene, hogy terjedjen). Marak Squires a Twitteren k\u00f6zz\u00e9tett k\u00e9rd\u00e9sben Aaron hal\u00e1l\u00e1r\u00f3l \u00e9s egy k\u00f6zz\u00e9tett cikkben c\u00e9loz egy meger\u0151s\u00edtetlen \u00f6sszeesk\u00fcv\u00e9s-elm\u00e9letre, amely szerint Aaron Swartz tal\u00e1lta az MIT arch\u00edvum\u00e1ban bizonyos dokumentumokat, amelyek diskredit\u00e1lj\u00e1k egyes fontos szem\u00e9lyeket, \u00e9s ez\u00e9rt meggyilkolt\u00e1k, az \u00f6ngyilkoss\u00e1g \u00e1lc\u00e1j\u00e1ba burkolva (holnap 9 \u00e9ve, hogy Aaron t\u00e1vozott az \u00e9letb\u0151l).
\n
Forr\u00e1s: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041c\u0430\u0440\u0430\u043a \u0421\u043a\u0432\u0430\u0439\u0440\u0441 (Marak Squires), \u0430\u0432\u0442\u043e\u0440 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u044b\u0445 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 colors (\u0440\u0430\u0441\u0446\u0432\u0435\u0442\u043a\u0430 \u043a\u043e\u043d\u0441\u043e\u043b\u0438 node.js) \u0438 faker (\u0433\u0435\u043d\u0435\u0440\u0430\u0442\u043e\u0440 \u0444\u0438\u043a\u0442\u0438\u0432\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0434\u043b\u044f \u043f\u043e\u043b\u0435\u0439 \u0432\u0432\u043e\u0434\u0430), \u043d\u0430\u0441\u0447\u0438\u0442\u044b\u0432\u0430\u044e\u0449\u0438\u0445 2.8 \u0438 25 \u043c\u043b\u043d \u0435\u0436\u0435\u043d\u0435\u0434\u0435\u043b\u044c\u043d\u044b\u0445 \u0437\u0430\u0433\u0440\u0443\u0437\u043e\u043a, \u0440\u0430\u0437\u043c\u0435\u0441\u0442\u0438\u043b \u0432 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0438 NPM \u0438 \u043d\u0430 GitHub \u043d\u043e\u0432\u044b\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 \u0441\u0432\u043e\u0438\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432, \u0432\u043a\u043b\u044e\u0447\u0430\u044e\u0449\u0438\u0435 \u0434\u0435\u0441\u0442\u0440\u0443\u043a\u0442\u0438\u0432\u043d\u044b\u0435 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f, \u0446\u0435\u043b\u0435\u043d\u0430\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u043e \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0449\u0438\u0435 \u043a \u0441\u0431\u043e\u044f\u043c \u043d\u0430 \u0441\u0442\u0430\u0434\u0438\u0438 \u0441\u0431\u043e\u0440\u043a\u0438 \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u044b\u0445 \u043f\u0440\u043e\u0435\u043a\u0442\u043e\u0432. \u0412 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0439 \u041c\u0430\u0440\u0430\u043a\u0430 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":102935,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-102934","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47 A fejleszt\u0151 destrukt\u00edv m\u00f3dos\u00edt\u00e1sokat hajtott v\u00e9gre az NPM colors \u00e9s faker csomagokban, amelyeket 20 ezer projekt haszn\u00e1l | ProHoster","description":"Marak Squires, a n\u00e9pszer\u0171 colors (node.js konzol sz\u00ednez\u0151) \u00e9s faker (\u00e1ladatok gener\u00e1l\u00f3 a bevitelhez) csomagok szerz\u0151je, amelyek hetente 2.8 \u00e9s 25 milli\u00f3 let\u00f6lt\u00e9st gener\u00e1lnak, k\u00f6zz\u00e9tett egyet.","canonical_url":"https:\/\/prohoster.info\/hu\/blog\/news\/%d1%80%d0%b0%d0%b7%d1%80%d0%b0%d0%b1%d0%be%d1%82%d1%87%d0%b8%d0%ba-%d0%b2%d0%bd%d1%91%d1%81-%d0%b4%d0%b5%d1%81%d1%82%d1%80%d1%83%d0%ba%d1%82%d0%b8%d0%b2%d0%bd%d1%8b%d0%b5-%d0%b8%d0%b7%d0%bc%d0%b5","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"hu_HU","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a \u0432\u043d\u0451\u0441 \u0434\u0435\u0441\u0442\u0440\u0443\u043a\u0442\u0438\u0432\u043d\u044b\u0435 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f \u0432 NPM-\u043f\u0430\u043a\u0435\u0442\u044b colors \u0438 faker, \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0435\u043c\u044b\u0435 \u0432 20 \u0442\u044b\u0441\u044f\u0447\u0430\u0445 \u043f\u0440\u043e\u0435\u043a\u0442\u0430\u0445 | ProHoster","og:description":"\u041c\u0430\u0440\u0430\u043a \u0421\u043a\u0432\u0430\u0439\u0440\u0441 (Marak Squires), \u0430\u0432\u0442\u043e\u0440 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u044b\u0445 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 colors (\u0440\u0430\u0441\u0446\u0432\u0435\u0442\u043a\u0430 \u043a\u043e\u043d\u0441\u043e\u043b\u0438 node.js) \u0438 faker (\u0433\u0435\u043d\u0435\u0440\u0430\u0442\u043e\u0440 \u0444\u0438\u043a\u0442\u0438\u0432\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0434\u043b\u044f \u043f\u043e\u043b\u0435\u0439 \u0432\u0432\u043e\u0434\u0430), \u043d\u0430\u0441\u0447\u0438\u0442\u044b\u0432\u0430\u044e\u0449\u0438\u0445 2.8 \u0438 25 \u043c\u043b\u043d \u0435\u0436\u0435\u043d\u0435\u0434\u0435\u043b\u044c\u043d\u044b\u0445 \u0437\u0430\u0433\u0440\u0443\u0437\u043e\u043a, \u0440\u0430\u0437\u043c\u0435\u0441\u0442\u0438\u043b \u0432.","og:url":"https:\/\/prohoster.info\/hu\/blog\/news\/%d1%80%d0%b0%d0%b7%d1%80%d0%b0%d0%b1%d0%be%d1%82%d1%87%d0%b8%d0%ba-%d0%b2%d0%bd%d1%91%d1%81-%d0%b4%d0%b5%d1%81%d1%82%d1%80%d1%83%d0%ba%d1%82%d0%b8%d0%b2%d0%bd%d1%8b%d0%b5-%d0%b8%d0%b7%d0%bc%d0%b5","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2022-01-10T13:36:47+00:00","article:modified_time":"2022-01-10T13:36:47+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"102934","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2022-01-10 13:37:43","updated":"2022-09-28 07:50:35","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/posts\/102934","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/comments?post=102934"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/posts\/102934\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/media\/102935"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/media?parent=102934"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/categories?post=102934"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/tags?post=102934"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}