9.27% ​​yokha ya osamalira phukusi la NPM amagwiritsa ntchito kutsimikizika kwazinthu ziwiri

Adam Baldwin, yemwe akutsogolera gulu lomwe limayang'anira chitetezo cha malo osungiramo zinthu a NPM, lofalitsidwa ziwerengero zomwe zakonzedwa kutengera zotsatira za chaka chatha:

• Ngakhale zomwe zikupitilira zochitika Ndi kutenga malo osungiramo zinthu a NPM, 9.27% ​​yokha ya osunga mapaketi amagwiritsa ntchito njira ziwiri zotsimikizira kuti ateteze mwayi wopezeka;
• Malinga ndi bungweli, polembetsa maakaunti atsopano, 13.37% anayesa kugwiritsanso ntchito mawu achinsinsi omwe adawonongeka omwe adapezeka mu kutayika kwa mawu achinsinsi odziwika. haveibeenpwned.com;
• Chaka chatha, ma tokeni 737 a NPM adachotsedwa atalakwitsa lofalitsidwa mu kaundula wa phukusi la NPM kapena m'malo osungiramo zinthu omwe amapezeka pagulu pa GitHub;
• Zoletsedwa kuba ndalama za digito zokwana $13 miliyoni chifukwa cha kupezeka kwa kuyesa kuyika chitseko chakumbuyo mu chikwama cha Komodo Agama;
• Chiwerengero chonse cha malipoti okhudza nkhani zachitetezo mu database ya NPM chafika pa 1285, ndipo mwa iwo malipoti 595 adaperekedwa mu 2019. Zidziwitso 2.2 za kufooka zidalandiridwa kudzera mu security@npmjs.com;
• Kwa chaka chimodzi, njira yolimbana ndi spam inaletsa zochitika 11526, kuphatikizapo zokhudzana ndi kuyesa kutsatsa malonda a torrent ndi mafilimu;
• Dongosolo losanthula khalidwe losazolowereka Malipoti 1.4 miliyoni adapangidwa kudzera mu mapempho a API, omwe adaphatikizapo deta yowunikira khalidwe ya 15.6 TB.

Source: opennet.ru