9.27% ​​yokha ya osamalira phukusi la NPM amagwiritsa ntchito kutsimikizika kwazinthu ziwiri

Adam Baldwin, yemwe amatsogolera gulu lachitetezo la NPM, lofalitsidwa ziwerengero zokonzedwa kutengera zotsatira za chaka chatha:

• Ngakhale zikupitilira zochitika ndi kulandidwa kwa nkhokwe za NPM, 9.27% ​​yokha ya osunga phukusi amagwiritsa ntchito kutsimikizika kwazinthu ziwiri kuteteza mwayi;
• Polembetsa, 13.37% yamaakaunti atsopano adayesa kugwiritsanso ntchito mawu achinsinsi omwe adawonekera pamawu achinsinsi odziwika, malinga ndi ntchitoyi. haveibeenpwned.com;
• Chaka chatha, zizindikiro za 737 NPM zinachotsedwa chifukwa zinali zolakwika lofalitsidwa mu kaundula wa phukusi la NPM kapena nkhokwe zopezeka pagulu pa GitHub;
• Apewedwa kuba kwa $ 13 miliyoni mu cryptocurrency chifukwa cha kupezeka kwa kuyesa kuphatikiza backdoor mu chikwama cha Komodo Agama;
• Chiwerengero chonse cha malipoti achitetezo mu nkhokwe ya NPM chafika 1285, pomwe malipoti 595 adakonzedwa mu 2019. Kudzera [imelo ndiotetezedwa] 2.2 zidziwitso zikwi za kukhalapo kwa ziwopsezo zidalandiridwa;
• M'kupita kwa chaka, dongosolo la antispam linaletsa malonda a 11526, kuphatikizapo okhudzana ndi kuyesa kulimbikitsa malonda a mitsinje ndi mafilimu;
• Analysis system khalidwe lachilendo adapanga malipoti okwana 1.4 miliyoni omwe adafunsidwa kudzera pa API, okhudza 15.6 TB ya data yokhala ndi chidziwitso chowunikira machitidwe.

Source: opennet.ru