{"id":108322,"date":"2023-05-04T12:48:14","date_gmt":"2023-05-04T10:48:14","guid":{"rendered":"https:\/\/prohoster.info\/?p=108322"},"modified":"2023-05-04T18:45:37","modified_gmt":"2023-05-04T16:45:37","slug":"perehvachen-kontrol-nad-14-php-bibliotkami-v-repozitorii-packagist","status":"publish","type":"post","link":"https:\/\/prohoster.info\/ro\/blog\/news\/perehvachen-kontrol-nad-14-php-bibliotkami-v-repozitorii-packagist","title":{"rendered":"Controlul asupra a 14 biblioteci PHP a fost preluat \u00een depozitul Packagist","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>Administratorii depozitului de pachete Packagist au dezv\u0103luit informa\u021bii despre un atac \u00een urma c\u0103ruia au fost preluate conturile a 14 biblioteci PHP, inclusiv pachete populare precum instantiator (526 milioane instal\u0103ri \u00een total, 8 milioane instal\u0103ri pe lun\u0103, 323 pachete dependente), sql-formatter (94 milioane instal\u0103ri \u00een total, 800 de mii pe lun\u0103, 109 pachete dependente), doctrine-cache-bundle (73 milioane instal\u0103ri \u00een total, 500 de mii pe lun\u0103, 348 pachete dependente) \u0219i rcode-detector-decoder (20 milioane instal\u0103ri \u00een total, 400 de mii pe lun\u0103, 66 pachete dependente).       <\/p>\n<p>Dup\u0103 compromiterea conturilor, atacatorul a modificat fi\u0219ierul composer.json, ad\u0103ug\u00e2nd \u00een c\u00e2mpul de descriere a proiectului informa\u021bia c\u0103 caut\u0103 un loc de munc\u0103 \u00een domeniul securit\u0103\u021bii informa\u021biei. Pentru a modifica fi\u0219ierul composer.json, atacatorul a \u00eenlocuit URL-urile repositoarelor originale cu linkuri c\u0103tre fork-uri modificate (\u00een Packagist sunt furnizate doar metadate cu linkuri c\u0103tre proiectele dezvoltate pe GitHub, iar \u00een timpul instal\u0103rii cu comanda \u201ecomposer install\u201d sau \u201ecomposer update\u201d pachetele sunt desc\u0103rcate direct de pe GitHub). De exemplu, pentru pachetul acmephp, repository-ul asociat a fost \u00eenlocuit de la acmephp\/acmephp la neskafe3v1\/acmephp.    <\/p>\n<p>Se pare c\u0103 atacul nu a fost efectuat pentru a desf\u0103\u0219ura ac\u021biuni mali\u021bioase, ci ca o demonstra\u021bie a inacceptabilit\u0103\u021bii de a folosi \u00een mod neglijent acelea\u0219i date de autentificare pe diferite site-uri. \u00cen ciuda practicii stabilite a \u201ehacking-ului etic\u201d, atacatorul nu a informat \u00een avans dezvoltatorii bibliotecilor \u0219i administratorii repository-ului despre experimentul pe care \u00eel desf\u0103\u0219ura. Ulterior, atacatorul a declarat c\u0103, dup\u0103 ce reu\u0219e\u0219te s\u0103 ob\u021bin\u0103 un loc de munc\u0103, va publica un raport detaliat despre metodele utilizate \u00een atac.    <\/p>\n<p>Conform datelor publicate de administratorii Packagist, toate conturile care gestionau pachetele compromise au folosit parole u\u0219or de ghicit, f\u0103r\u0103 activarea autentific\u0103rii cu doi factori. Se afirm\u0103 c\u0103 \u00een conturile compromise au fost folosite parole aplicate nu doar \u00een Packagist, ci \u0219i \u00een alte servicii, a c\u0103ror baze de date cu parole au fost compromise anterior \u0219i au ajuns \u00een acces public. De asemenea, o alt\u0103 variant\u0103 de acces ar fi putut fi capturarea emailurilor proprietarilor conturilor, care erau legate de domenii expirate.    <\/p>\n<p>Pachete compromise:  <\/p>\n<ul>\n<li class=\"l\"> acmephp\/acmephp \t(124,860 instal\u0103ri de-a lungul existen\u021bei pachetului)\n<li class=\"l\"> acmephp\/core \t(419,258)\n<li class=\"l\"> acmephp\/ssl \t(531,692)\n<li class=\"l\"> doctrine\/doctrine-cache-bundle \t(73,490,057)\n<li class=\"l\"> doctrine\/doctrine-module \t(5,516,721)\n<li class=\"l\"> doctrine\/doctrine-mongo-odm-module \t(516,441)\n<li class=\"l\"> doctrine\/doctrine-orm-module \t(5,103,306)\n<li class=\"l\"> doctrine\/instantiator \t(526,809,061)\n<li class=\"l\"> growthbook\/growthbook \t(97,568\n<li class=\"l\"> jdorn\/file-system-cache \t(32,660)\n<li class=\"l\"> jdorn\/sql-formatter \t(94,593,846)\n<li class=\"l\"> khanamiryan\/qrcode-detector-decoder \t(20,421,500)\n<li class=\"l\"> object-calisthenics\/phpcs-calisthenics-rules \t(2,196,380)\n<li class=\"l\"> tga\/simhash-php, tgalopin\/simhashphp (30,555)  <\/ul>\n<p>Sursa: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=59075\">opennet.ro<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u0410\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u044b \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u044f \u043f\u0430\u043a\u0435\u0442\u043e\u0432 Packagist \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0438 \u0441\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u043e\u0431 \u0430\u0442\u0430\u043a\u0435, \u0432 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0431\u044b\u043b \u0437\u0430\u0445\u0432\u0430\u0447\u0435\u043d \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0443\u0447\u0451\u0442\u043d\u044b\u043c\u0438 \u0437\u0430\u043f\u0438\u0441\u044f\u043c\u0438 \u0441\u043e\u043f\u0440\u043e\u0432\u043e\u0436\u0434\u0430\u044e\u0449\u0438\u0445 14 PHP-\u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a, \u0432 \u0447\u0438\u0441\u043b\u0435 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0442\u0430\u043a\u0438\u0435 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u044b\u0435 \u043f\u0430\u043a\u0435\u0442\u044b, \u043a\u0430\u043a instantiator (526 \u043c\u043b\u043d \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043e\u043a \u0432\u0441\u0435\u0433\u043e, 8 \u043c\u043b\u043d \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043e\u043a \u0437\u0430 \u043c\u0435\u0441\u044f\u0446, 323 \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u044b\u0445 \u043f\u0430\u043a\u0435\u0442\u0430), sql-formatter (94 \u043c\u043b\u043d \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043e\u043a \u0432\u0441\u0435\u0433\u043e, 800 \u0442\u044b\u0441\u044f\u0447 \u0437\u0430 \u043c\u0435\u0441\u044f\u0446, 109 \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u044b\u0445 \u043f\u0430\u043a\u0435\u0442\u043e\u0432), doctrine-cache-bundle (73 \u043c\u043b\u043d [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-108322","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.2.1 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u0410\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u044b \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u044f \u043f\u0430\u043a\u0435\u0442\u043e\u0432 Packagist \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0438 \u0441\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u043e\u0431 \u0430\u0442\u0430\u043a\u0435, \u0432 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0431\u044b\u043b \u0437\u0430\u0445\u0432\u0430\u0447\u0435\u043d \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0443\u0447\u0451\u0442\u043d\u044b\u043c\u0438 \u0437\u0430\u043f\u0438\u0441\u044f\u043c\u0438 \u0441\u043e\u043f\u0440\u043e\u0432\u043e\u0436\u0434\u0430\u044e\u0449\u0438\u0445 14 PHP-\u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a, \u0432 \u0447\u0438\u0441\u043b\u0435 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0442\u0430\u043a\u0438\u0435 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u044b\u0435 \u043f\u0430\u043a\u0435\u0442\u044b, \u043a\u0430\u043a.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/ro\/blog\/news\/perehvachen-kontrol-nad-14-php-bibliotkami-v-repozitorii-packagist\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.2.1\" \/>\n\t\t<meta property=\"og:locale\" content=\"ro_RO\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u041f\u0435\u0440\u0435\u0445\u0432\u0430\u0447\u0435\u043d \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 14 PHP-\u0431\u0438\u0431\u043b\u0438\u043e\u0442\u043a\u0430\u043c\u0438 \u0432 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0438 Packagist | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u0410\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u044b \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u044f \u043f\u0430\u043a\u0435\u0442\u043e\u0432 Packagist \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0438 \u0441\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u043e\u0431 \u0430\u0442\u0430\u043a\u0435, \u0432 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0431\u044b\u043b \u0437\u0430\u0445\u0432\u0430\u0447\u0435\u043d \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0443\u0447\u0451\u0442\u043d\u044b\u043c\u0438 \u0437\u0430\u043f\u0438\u0441\u044f\u043c\u0438 \u0441\u043e\u043f\u0440\u043e\u0432\u043e\u0436\u0434\u0430\u044e\u0449\u0438\u0445 14 PHP-\u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a, \u0432 \u0447\u0438\u0441\u043b\u0435 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0442\u0430\u043a\u0438\u0435 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u044b\u0435 \u043f\u0430\u043a\u0435\u0442\u044b, \u043a\u0430\u043a.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/ro\/blog\/news\/perehvachen-kontrol-nad-14-php-bibliotkami-v-repozitorii-packagist\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2023-05-04T10:48:14+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2023-05-04T16:45:37+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Control preluat asupra a 14 biblioteci PHP \u00een depozitul Packagist | ProHoster","description":"Administratorii depozitului de pachete Packagist au dezv\u0103luit informa\u021bii despre un atac, \u00een urma c\u0103ruia a fost preluat controlul asupra conturilor a 14 biblioteci PHP, printre care \u0219i pachete populare, cum ar fi.","canonical_url":"https:\/\/prohoster.info\/ro\/blog\/news\/perehvachen-kontrol-nad-14-php-bibliotkami-v-repozitorii-packagist","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"ro_RO","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041f\u0435\u0440\u0435\u0445\u0432\u0430\u0447\u0435\u043d \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 14 PHP-\u0431\u0438\u0431\u043b\u0438\u043e\u0442\u043a\u0430\u043c\u0438 \u0432 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0438 Packagist | ProHoster","og:description":"\u0410\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u044b \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u044f \u043f\u0430\u043a\u0435\u0442\u043e\u0432 Packagist \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0438 \u0441\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u043e\u0431 \u0430\u0442\u0430\u043a\u0435, \u0432 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0431\u044b\u043b \u0437\u0430\u0445\u0432\u0430\u0447\u0435\u043d \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0443\u0447\u0451\u0442\u043d\u044b\u043c\u0438 \u0437\u0430\u043f\u0438\u0441\u044f\u043c\u0438 \u0441\u043e\u043f\u0440\u043e\u0432\u043e\u0436\u0434\u0430\u044e\u0449\u0438\u0445 14 PHP-\u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a, \u0432 \u0447\u0438\u0441\u043b\u0435 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0442\u0430\u043a\u0438\u0435 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u044b\u0435 \u043f\u0430\u043a\u0435\u0442\u044b, \u043a\u0430\u043a.","og:url":"https:\/\/prohoster.info\/ro\/blog\/news\/perehvachen-kontrol-nad-14-php-bibliotkami-v-repozitorii-packagist","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2023-05-04T10:48:14+00:00","article:modified_time":"2023-05-04T16:45:37+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/108322","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/comments?post=108322"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/108322\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media?parent=108322"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/categories?post=108322"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/tags?post=108322"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}