Yesani kupanga phukusi la NPM lomwe limadalira ma phukusi onse omwe ali munkhokwe

M'modzi mwa opanga mapulogalamu a JavaScript adayesa kupanga ndikuyika munkhokwe ya NPM "chilichonse", chomwe chimakwirira mapaketi onse omwe alipo munkhokwe ndi zodalira. Kuti mugwiritse ntchito izi, phukusi la "chilichonse" limadalira mwachindunji ndi mapaketi asanu a "@everything-registry/chunk-N", omwe nawonso amadalira mapaketi opitilira 3000 "sub-chunk-N", iliyonse yomwe imamangiriza 800 phukusi lomwe lilipo munkhokwe.

Kuyika "chilichonse" mu NPM kunali ndi zotsatira ziwiri zosangalatsa. Choyamba, phukusi la "chilichonse" lakhala ngati chida chochitira ziwopsezo za DoS, popeza kuyesa kuyiyika kumabweretsa kutsitsa mamiliyoni a phukusi lomwe limakhala mu NPM ndikutopetsa malo omwe alipo kapena kuyimitsa ntchito zomanga. Malinga ndi ziwerengero za NPM, phukusili lidatsitsidwa nthawi pafupifupi 250, koma palibe amene amavutitsa kuwonjezera ngati kudalira phukusi lina akaunti ya wopangayo itabedwa kuti iwononge. Kuphatikiza apo, mautumiki ena ndi zida zomwe zimayang'anira ndikuyang'ana mapaketi atsopano opangidwa ndi NPM adawululidwa mosadziwa.

Kachiwiri, kusindikiza phukusi la "chilichonse" kudatsekereza kuthekera kochotsa phukusi lililonse mu NPM lomwe lidakhala pamndandanda wake wodalira. Phukusi lochokera ku NPM likhoza kuchotsedwa ndi wolemba pokhapokha ngati silinagwiritsidwe ntchito podalira maphukusi ena, koma pambuyo pofalitsa "chilichonse" kudalira kunapezeka kuti kuphimba mapepala onse omwe ali munkhokwe. Ndizodabwitsa kuti kuchotsedwa kwa "chilichonse" phukusi palokha kunatsekedwanso, kuyambira zaka 9 zapitazo phukusi loyesa "china chilichonse" chinayikidwa m'malo osungiramo zinthu, chomwe chinaphatikizapo chingwe "chilichonse" pamndandanda wazomwe zimadalira. Choncho, pambuyo pofalitsidwa, phukusi la "chilichonse" linatha kudalira phukusi lina.

Source: opennet.ru

Kuwonjezera ndemanga