Kampani ya Ledger, yomwe imapanga ma wallet a Hardware a dzina lomwelo, yawulula zambiri za kusokonekera kwa malo ake a NPM, zomwe zidapangitsa kukhazikitsidwa kwa code yoyipa mu laibulale ya Ledger Connect Kit JavaScript, yomwe imagwiritsidwa ntchito popereka mwayi wogwiritsa ntchito intaneti. crypto wallets. Owukirawo adatha kumasula mitundu yopeka ya Connect Kit, momwe adayikamo code yomwe idalowa m'malo mwachinyengo potumiza ndalama kuchokera ku chikwama cha crypto cha wozunzidwayo.
Khodi yoyipa idagawidwa m'mitundu ya Connect Kit 1.1.5, 1.1.6 ndi 1.1.7, ndipo idachotsedwa pakusinthidwa kovomerezeka 1.1.8. Kufikira kunkhokwe ya NPM kudapezedwa ndi omwe adawukira panthawi yachinyengo, chifukwa chake adatha kudziwa magawo aakaunti a m'modzi mwa omwe kale anali ogwira ntchito ku Ledger. Zifukwa zomwe zatchulidwa zachipambano cha chiwembuchi ndi monga kuthekera kofalitsa zotulutsidwa popanda kutsimikizika pazifukwa ziwiri, kusiya ufulu wopezeka kwa wogwira ntchito yemwe wachotsedwa ntchito, komanso kugwiritsa ntchito netiweki yobweretsera zomwe sizimalola kutseka mulaibulale yotsimikizika (zofunsira nthawi zonse. adagwiritsa ntchito mtundu waposachedwa).
Kusagwirizana kusanapezeke ndipo code yoyipa idachotsedwa, kutulutsidwa kwa laibulale yabodza kunalipo kuti kutsitsidwe kwa maola a 5, koma malinga ndi Ledger, nthawi yeniyeni ya kuchotsedwako inali yochepa kwa maola awiri. Kuti atumizenso ndalama ku chikwama cha wozunzidwayo, chiwonongekocho chinaphatikizapo pulojekiti yabodza mu ntchito ya WalletConnect, yomwe yatsekedwa. Malinga ndi wofufuza wodziyimira pawokha ZachXBT, pa kuukira owukirawo adatha kuba osachepera $ 610 zikwi kuchokera kwa ozunzidwa 'crypto wallets. Malinga ndi ntchito ya Revoke.cash, kutayika kwa ogwiritsa ntchito masamba osiyanasiyana omwe adagwiritsa ntchito Connect Kit kudaposa madola 850.
Nkhaniyi idangokhudza ogwiritsa ntchito mawebusayiti a chipani chachitatu (DApps) pogwiritsa ntchito laibulale ya Ledger Connect Kit, ndipo siinasokoneze kukhulupirika kwa ma wallet a Ledger hardware kapena pulogalamu ya Ledger Live. Pofuna kuchepetsa mwayi woti zitha kuchitiridwa nkhanzazi kudzera mwa omwe akusokoneza, maakaunti a omwe adatenga nawo gawo pa projekiti ya Connect Kit mu NPM adasinthidwa kukhala mawonekedwe owerengera okha, ndipo kutumiza mwachindunji phukusi la NPM ndi opanga mahotelo kunali koletsedwa. Makiyi onse osindikizira munkhokwe ya GitHub asinthidwanso.
Source: opennet.ru
