{"id":102561,"date":"2021-12-10T03:36:44","date_gmt":"2021-12-10T01:36:44","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/v-repozitorii-npm-vyyavleno-17-vredonosnyh-paketov"},"modified":"2021-12-10T03:36:44","modified_gmt":"2021-12-10T01:36:44","slug":"v-repozitorii-npm-vyyavleno-17-vredonosnyh-paketov","status":"publish","type":"post","link":"https:\/\/prohoster.info\/ro\/blog\/news\/v-repozitorii-npm-vyyavleno-17-vredonosnyh-paketov","title":{"rendered":"Compania MariaDB, care coordoneaz\u0103 \u00eempreun\u0103 cu organiza\u021bia non-profit omonim\u0103 dezvoltarea serverului de baze de date MariaDB, a anun\u021bat o schimbare semnificativ\u0103 a programului de crare a versiunilor MariaDB Community Server \u0219i a schemei sale.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

\u00cen depozitul NPM au fost identificate 17 pachete mali\u021bioase, care au fost distribuite folosind tacticile de typosquatting, adic\u0103 av\u00e2nd denumiri asem\u0103n\u0103toare cu cele ale bibliotecilor populare, av\u00e2nd \u00een vedere c\u0103 utilizatorul va face o eroare de tipar atunci c\u00e2nd scrie numele sau nu va observa diferen\u021bele aleg\u00e2nd un modul din list\u0103. <\/p>\n

Pachetele discord-selfbot-v14, discord-lofy, discordsystem \u0219i discord-vilao au folosit o variant\u0103 modificat\u0103 a bibliotecii legitime discord.js, care ofer\u0103 func\u021bii pentru interac\u021biunea cu API-ul Discord. Componentele mali\u021bioase au fost integrate \u00eentr-unul dintre fi\u0219ierele pachetului \u0219i au inclus aproximativ 4000 de linii de cod, complicate prin utilizarea distorsion\u0103rii numelui variabilelor, cript\u0103rii \u0219irurilor de caractere \u0219i \u00eenc\u0103lc\u0103rii format\u0103rii codului. Codul scana sistemul local de fi\u0219iere \u00een c\u0103utarea token-urilor Discord \u0219i, \u00een cazul descoperirii, le trimitea la serverul<\/a> atacatori. <\/p>\n

Pachetul fix-error a fost declarat ca repar\u00e2nd erorile \u00een Discord selfbot, dar includea o aplica\u021bie trojan numit\u0103 PirateStealer, care fura numerele de carduri de credit \u0219i conturile asociate cu Discord. Componenta mali\u021bioas\u0103 se activa prin substituirea codului JavaScript \u00een clientul Discord. <\/p>\n

Pachetul prerequests-xcode includea un trojan pentru organizarea accesului la distan\u021b\u0103 \u00een sistemul utilizatorului, bazat pe aplica\u021bia Python DiscordRAT. <\/p>\n

Se presupune c\u0103 accesul la serverele Discord ar fi putut fi necesar atacatorilor pentru desf\u0103\u0219urarea punctelor de control ale botnet-ului, ca un proxy pentru a desc\u0103rca informa\u021bii de pe sistemele compromise, a ascunde urmele \u00een timpul atacurilor, a r\u0103sp\u00e2ndi software mali\u021bios printre utilizatorii Discord sau a revinde conturi premium. <\/p>\n

Pachetele wafer-bind, wafer-autocomplete, wafer-beacon, wafer-caas, wafer-toggle, wafer-geolocation, wafer-image, wafer-form, wafer-lightbox, octavius-public \u0219i mrg-message-broker includeau cod pentru trimiterea con\u021binutului variabilelor de mediu, care, de exemplu, ar putea include chei de acces, token-uri sau parole pentru sisteme de integrare continu\u0103 sau medii cloud, precum AWS.
\n
Sursa: opennet.ro<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0412 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0438 NPM \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043e 17 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 \u043f\u0430\u043a\u0435\u0442\u043e\u0432, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u043b\u0438\u0441\u044c \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0442\u0430\u0439\u043f\u0441\u043a\u0432\u043e\u0442\u0442\u0438\u043d\u0433\u0430, \u0442.\u0435. \u0441 \u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u0438\u0435\u043c \u0438\u043c\u0451\u043d \u043f\u043e\u0445\u043e\u0436\u0438\u0445 \u043d\u0430 \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u044f \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u044b\u0445 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a \u0441 \u0440\u0430\u0441\u0447\u0451\u0442\u043e\u043c \u043d\u0430 \u0442\u043e, \u0447\u0442\u043e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u0434\u043e\u043f\u0443\u0441\u0442\u0438\u0442 \u043e\u043f\u0435\u0447\u0430\u0442\u043a\u0443 \u043f\u0440\u0438 \u043d\u0430\u0431\u043e\u0440\u0435 \u0438\u043c\u0435\u043d\u0438 \u0438\u043b\u0438 \u043d\u0435 \u0437\u0430\u043c\u0435\u0442\u0438\u0442 \u0440\u0430\u0437\u043b\u0438\u0447\u0438\u0439, \u0432\u044b\u0431\u0438\u0440\u0430\u044f \u043c\u043e\u0434\u0443\u043b\u044c \u0438\u0437 \u0441\u043f\u0438\u0441\u043a\u0430. \u041f\u0430\u043a\u0435\u0442\u044b discord-selfbot-v14, discord-lofy, discordsystem \u0438 discord-vilao \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438 \u043c\u043e\u0434\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0432\u0430\u0440\u0438\u0430\u043d\u0442 \u043b\u0435\u0433\u0438\u0442\u0438\u043c\u043d\u043e\u0439 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438 discord.js, \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0449\u0435\u0439 \u0444\u0443\u043d\u043a\u0446\u0438\u0438 \u0434\u043b\u044f […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-102561","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47\u00cen depozitul NPM au fost identificate 17 pachete mali\u021bioase | ProHoster","description":"\u00cen depozitul NPM au fost identificate 17 pachete mali\u021bioase, care au fost distribuite folosind tacticile de typosquatting, adic\u0103.","canonical_url":"https:\/\/prohoster.info\/ro\/blog\/news\/v-repozitorii-npm-vyyavleno-17-vredonosnyh-paketov","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"ro_RO","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0412 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0438 NPM \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043e 17 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 | ProHoster","og:description":"\u0412 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0438 NPM \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043e 17 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 \u043f\u0430\u043a\u0435\u0442\u043e\u0432, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u043b\u0438\u0441\u044c \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0442\u0430\u0439\u043f\u0441\u043a\u0432\u043e\u0442\u0442\u0438\u043d\u0433\u0430, \u0442.\u0435.","og:url":"https:\/\/prohoster.info\/ro\/blog\/news\/v-repozitorii-npm-vyyavleno-17-vredonosnyh-paketov","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2021-12-10T01:36:44+00:00","article:modified_time":"2021-12-10T01:36:44+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"102561","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-12-10 01:38:02","updated":"2022-09-30 15:02:40","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/102561","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/comments?post=102561"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/102561\/revisions"}],"predecessor-version":[{"id":172961,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/102561\/revisions\/172961"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media?parent=102561"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/categories?post=102561"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/tags?post=102561"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}