Egy JavaScript-csomagokat fejleszt\u0151 egy k\u00eds\u00e9rletet v\u00e9gzett az NPM-t\u00e1rba val\u00f3 csomag l\u00e9trehoz\u00e1s\u00e1val \u00e9s k\u00f6zz\u00e9t\u00e9tel\u00e9vel, amely az «everything» nevet viseli, \u00e9s amely f\u00fcgg\u0151s\u00e9gei r\u00e9v\u00e9n lefedi az \u00f6sszes l\u00e9tez\u0151 csomagot a t\u00e1rban. Ennek a lehet\u0151s\u00e9gnek a megval\u00f3s\u00edt\u00e1sa \u00e9rdek\u00e9ben az «everything» csomag \u00f6t csomaggal \u00e1ll k\u00f6zvetlen f\u00fcgg\u0151s\u00e9gi kapcsolatban, az «@everything-registry\/chunk-N» csomagokkal, amelyek viszont t\u00f6bb mint 3000 «sub-chunk-N» csomaghoz kapcsol\u00f3dnak, mindegyikben 800 l\u00e9tez\u0151 csomag van a rep\u00f3ban. <\/p>\n
Az «everything» NPM-be val\u00f3 felt\u00f6lt\u00e9se k\u00e9t \u00e9rdekes hat\u00e1shoz vezetett. El\u0151sz\u00f6r is, az «everything» csomag egyfajta eszk\u00f6zz\u00e9 v\u00e1lt DoS-t\u00e1mad\u00e1sok v\u00e9grehajt\u00e1s\u00e1ra, mivel annak telep\u00edt\u00e9si k\u00eds\u00e9rlete milli\u00f3k let\u00f6lt\u00e9s\u00e9hez vezetett, amelyek NPM-en tal\u00e1lhat\u00f3k, \u00edgy kimer\u00edtve a rendelkez\u00e9sre \u00e1ll\u00f3 t\u00e1rol\u00f3helyet vagy le\u00e1ll\u00edtva a build folyamatokat. Az NPM statisztik\u00e1i szerint a csomagot k\u00f6r\u00fclbel\u00fcl 250 alkalommal t\u00f6lt\u00f6tt\u00e9k le, de senki sem akad\u00e1lyozza meg, hogy felt\u00f6r\u00f6tt fejleszt\u0151i fi\u00f3k k\u00eds\u00e9rlete sokat hozz\u00e1adjon egy m\u00e1sik csomag f\u00fcgg\u0151s\u00e9geihez. Ezen k\u00edv\u00fcl, akaratlanul is t\u00e1mad\u00e1s alatt \u00e1lltak bizonyos szolg\u00e1ltat\u00e1sok \u00e9s eszk\u00f6z\u00f6k, amelyek \u00fajonnan NPM-re felt\u00f6lt\u00f6tt csomagok figyel\u00e9s\u00e9t \u00e9s ellen\u0151rz\u00e9s\u00e9t v\u00e9gzik. <\/p>\n
M\u00e1sodszor, az «everything» csomag k\u00f6zz\u00e9t\u00e9tele gyakorlatilag blokkolta a NPM b\u00e1rmilyen csomagj\u00e1nak t\u00f6rl\u00e9s\u00e9t, amelyek a f\u00fcgg\u0151s\u00e9geinek list\u00e1j\u00e1ban szerepeltek. Az NPM-b\u0151l egy csomag csak akkor t\u00f6r\u00f6lhet\u0151 a szerz\u0151 \u00e1ltal, ha m\u00e9g nem haszn\u00e1lj\u00e1k m\u00e1s csomagok f\u00fcgg\u0151s\u00e9geiben, de az «everything» k\u00f6zz\u00e9t\u00e9tele ut\u00e1n az \u00f6sszes csomag beker\u00fclt ezek k\u00f6z\u00e9 a f\u00fcgg\u0151s\u00e9gek k\u00f6z\u00e9. \u00c9rdekes, hogy az «everything» csomag t\u00f6rl\u00e9se is blokkolva maradt, mivel 9 \u00e9vvel ezel\u0151tt a t\u00e1rban k\u00f6zz\u00e9tettek egy teszt csomagot «everything-else» n\u00e9ven, amely tartalmazta az «everything» nev\u00e9t a f\u00fcgg\u0151s\u00e9gek list\u00e1j\u00e1ban. \u00cdgy az «everything» csomag a k\u00f6zz\u00e9t\u00e9telt k\u00f6vet\u0151en egy m\u00e1sik csomag f\u00fcgg\u0151s\u00e9gei k\u00f6z\u00e9 ker\u00fclt. \u041e\u0434\u0438\u043d \u0438\u0437 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u043e\u0432 JavaScript-\u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u043f\u0440\u043e\u0432\u0451\u043b \u044d\u043a\u0441\u043f\u0435\u0440\u0438\u043c\u0435\u043d\u0442 \u0441 \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u0435\u043c \u0438 \u0440\u0430\u0437\u043c\u0435\u0449\u0435\u043d\u0438\u0435\u043c \u0432 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0438 NPM \u043f\u0430\u043a\u0435\u0442\u0430 «everything», \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043e\u0445\u0432\u0430\u0442\u044b\u0432\u0430\u0435\u0442 \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u044f\u043c\u0438 \u0432\u0441\u0435 \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u0435 \u043f\u0430\u043a\u0435\u0442\u044b \u0432 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0438. \u0414\u043b\u044f \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u043f\u043e\u0434\u043e\u0431\u043d\u043e\u0439 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u043f\u0430\u043a\u0435\u0442 «everything» \u0441\u0432\u044f\u0437\u0430\u043d \u043f\u0440\u044f\u043c\u044b\u043c\u0438 \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u044f\u043c\u0438 \u0441 \u043f\u044f\u0442\u044c\u044e \u043f\u0430\u043a\u0435\u0442\u0430\u043c\u0438 «@everything-registry\/chunk-N», \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0432 \u0441\u0432\u043e\u044e \u043e\u0447\u0435\u0440\u0435\u0434\u044c \u043f\u0440\u0438\u0432\u044f\u0437\u044b\u0432\u0430\u044e\u0442\u0441\u044f \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u044f\u043c\u0438 \u043a \u0431\u043e\u043b\u0435\u0435 3000 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 «sub-chunk-N», \u0432 \u043a\u0430\u0436\u0434\u043e\u043c \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043f\u0440\u0438\u0432\u044f\u0437\u043a\u0430 \u043a 800 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-112714","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47K\u00eds\u00e9rlet NPM-csomag l\u00e9trehoz\u00e1s\u00e1ra, amely minden csomagt\u00f3l f\u00fcgg a t\u00e1rban | ProHoster","description":"Egy JavaScript-csomagok fejleszt\u0151je k\u00eds\u00e9rletet v\u00e9gzett az \"everything\" nev\u0171 csomag l\u00e9trehoz\u00e1s\u00e1ra \u00e9s k\u00f6zz\u00e9t\u00e9tel\u00e9re az NPM-t\u00e1rban, amely kapcsol\u00f3d\u00f3 f\u00fcgg\u0151s\u00e9gekkel rendelkezik az \u00f6sszes l\u00e9tez\u0151 csomaghoz a t\u00e1rban.","canonical_url":"https:\/\/prohoster.info\/hu\/blog\/news\/eksperiment-s-sozdaniem-npm-paketa-zavisimogo-ot-vseh-paketov-v-repozitorii","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"hu_HU","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u042d\u043a\u0441\u043f\u0435\u0440\u0438\u043c\u0435\u043d\u0442 \u0441 \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u0435\u043c NPM-\u043f\u0430\u043a\u0435\u0442\u0430, \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0433\u043e \u043e\u0442 \u0432\u0441\u0435\u0445 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u0432 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0438 | ProHoster","og:description":"\u041e\u0434\u0438\u043d \u0438\u0437 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u043e\u0432 JavaScript-\u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u043f\u0440\u043e\u0432\u0451\u043b \u044d\u043a\u0441\u043f\u0435\u0440\u0438\u043c\u0435\u043d\u0442 \u0441 \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u0435\u043c \u0438 \u0440\u0430\u0437\u043c\u0435\u0449\u0435\u043d\u0438\u0435\u043c \u0432 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0438 NPM \u043f\u0430\u043a\u0435\u0442\u0430 "everything", \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043e\u0445\u0432\u0430\u0442\u044b\u0432\u0430\u0435\u0442 \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u044f\u043c\u0438 \u0432\u0441\u0435 \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u0435 \u043f\u0430\u043a\u0435\u0442\u044b \u0432 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0438.","og:url":"https:\/\/prohoster.info\/hu\/blog\/news\/eksperiment-s-sozdaniem-npm-paketa-zavisimogo-ot-vseh-paketov-v-repozitorii","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2024-01-05T13:10:15+00:00","article:modified_time":"2024-01-05T13:10:15+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/posts\/112714","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/comments?post=112714"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/posts\/112714\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/media?parent=112714"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/categories?post=112714"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/tags?post=112714"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}
\n
Forr\u00e1s: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"