Na pulea le 14 PHP faletusi i le Packagist repository

Pule o le Packagist package repository na faʻaalia faʻamatalaga e uiga i se osofaʻiga na mafua ai ona pulea faʻamatalaga a le 14 PHP faletusi, e aofia ai faʻailoga lauiloa e pei o le instantiator (526 miliona faʻapipiʻi atoa, 8 miliona faʻapipiʻi i le masina, 323 faʻalagolago i pusa), sql -formatter (94 miliona le aofaʻi o faʻapipiʻi, 800 afe i le masina, 109 faʻalagolago i afifi), aʻoaʻoga-cache-bundle (73 miliona faʻapipiʻi atoa, 500 afe i le masina, 348 faʻalagolago i afifi) ma le rcode-detector-decoder (20 miliona aofaʻi faʻapipiʻi , 400 afe i le masina, 66 afifi faʻalagolago).

Ina ua uma ona fetuutuunai tala, na suia e le tagata osofaʻi le faila o le composer.json, faʻaopoopo faʻamatalaga i le fanua faʻamatalaga o galuega o loʻo ia sailia mo se galuega e fesoʻotaʻi ma le saogalemu o faʻamatalaga. Ina ia faia suiga i le faila composer.json, na suia e le tagata osofaʻi URL o uluai fale teu oloa ma fesoʻotaʻiga i tui faʻaleleia (Packagist e tuʻuina atu naʻo metadata ma fesoʻotaʻiga i poloketi na atiaʻe i luga o GitHub; pe a faʻapipiʻi ma le "composer install" poʻo le "composer update" poloaiga, afifi e sii saʻo mai GitHub). Mo se faʻataʻitaʻiga, mo le pusa acmephp, na suia le fale teu oloa mai le acmephp/acmephp i le neskafe3v1/acmephp.

E foliga mai, o le osofaʻiga na faia e le o le faia o ni gaioiga leaga, ae o se faʻataʻitaʻiga o le le taliaina o se uiga faʻatamala i le faʻaogaina o faʻailoga faʻalua i luga o nofoaga eseese. I le taimi lava e tasi, o le tagata osofaʻi, e le tusa ai ma le masani masani o le "hacking faʻataʻitaʻiga," na te leʻi logoina muamua le au atinaʻe faletusi ma le faʻaputuga e uiga i le faʻataʻitaʻiga o loʻo faia. Na faailoa mulimuli ane e le tagata osofaʻi e faapea, a maeʻa ona ia mauaina le galuega, o le a ia lomia se lipoti auiliili i auala na faʻaaogaina i le osofaʻiga.

E tusa ai ma faʻamaumauga na lomia e le Packagist administrators, o tala uma na faʻatautaia ia afifi fetuutuunai na faʻaogaina faʻamatalaga faigofie e mate e aunoa ma le faʻatagaina o faʻamaoniga e lua. O loʻo tuʻuaʻia e faʻapea o faʻamatalaga hacked na faʻaogaina upu faʻaoga na faʻaaogaina e le gata i le Packagist, ae faʻapea foʻi i isi auaunaga, o faʻamaumauga faʻamaumauga o upu faʻamaonia na muamua faʻafefeteina ma faʻasalalau lautele. O le pu'eina o imeli a tagata e ona teuga tupe na feso'ota'i atu i vaega ua mae'a aoga e mafai fo'i ona fa'aoga e fai ma filifiliga e maua ai avanoa.

afifi fa'aletonu:

• acmephp/acmephp (124,860 faʻapipiʻi mo le olaga atoa o le afifi)
• acmephp/core (419,258)
• acmephp/ssl (531,692)
• a'oa'oga/doctrine-cache-bundle (73,490,057)
• aoaoga faavae/aoaoga-module (5,516,721)
• a'oa'oga/a'oa'oga-mongo-odm-module (516,441)
• aoaoga faavae/a'oa'oga-orm-module (5,103,306)
• aoaoga faavae/instantiator (526,809,061)
• tusi tuputupu a'e/tusi tuputupu a'e (97,568
• jdorn/file-system-cache (32,660)
• jdorn/sql-formatter (94,593,846)
• khanamiryan/qrcode-detector-decoder (20,421,500)
• object-calisthenics/phpcs-calisthenics-rules (2,196,380)
• tga/simhash-php, tgalopin/simhashphp (30,555)

puna: opennet.ru