GitHub yakazivisa kuti NPM repositories iri kugonesa mbiri-chinhu chechokwadi kune zana NPM mapakeji anosanganisirwa seanotsamira muhuwandu hukuru hwepakeji. Vagadziri vemapakeji aya vanozokwanisa kuita echokwadi repository mashandiro chete mushure mekugonesa maviri-chinhu chechokwadi, icho chinoda simbiso yekupinda uchishandisa imwe-nguva passwords (TOTP) inogadzirwa nezvikumbiro zvakaita seAuthy, Google Authenticator uye FreeOTP. Munguva pfupi iri kutevera, kuwedzera kune TOTP, vanoronga kuwedzera kukwanisa kushandisa hardware makiyi uye biometric scanners inotsigira WebAuth protocol.
Musi waKurume 1, zvakarongwa kuendesa maakaundi ese eNPM asina mbiri-chinhu chechokwadi chinogoneswa kushandisa yakawedzera account verification, izvo zvinoda kuisa imwe-nguva kodhi inotumirwa neemail paunenge uchiedza kupinda munpmjs.com kana kuita yakatendeseka. kushanda mu npm utility. Kana mbiri-yechokwadi yechinhu ichigoneswa, yakawedzerwa email verification haina kuiswa. Musi waKukadzi 16 na13, kuyedza kwechinguva chidiki chekuongorora kweakaundi ese kuchaitwa kwezuva.
Ngatiyeukei kuti maererano neongororo yakaitwa muna 2020, 9.27% ββchete yevagadziri vepasuru vakashandisa mbiri-chinhu chechokwadi kuchengetedza kupinda, uye mu13.37% yezviitiko, pakunyoresa maakaundi matsva, vanogadzira vakaedza kushandisa zvakare mapassword akakanganiswa aionekwa anozivikanwa. password inodonha. Munguva yekuongorora kuchengetedza password, 12% yeNPM maakaunti (13% yemapakeji) yakawanikwa nekuda kwekushandiswa kweanofungidzira uye asina mapassword akadai se "123456." Pakati pezvainetsa paiva nemaakaundi mana emushandisi kubva kuPamusoro makumi maviri anonyanya kufarirwa mapakeji, gumi nematatu maakaundi ane mapakeji akatorwa kanopfuura 4 miriyoni pamwedzi, makumi mana aine anopfuura mamirioni gumi ekurodha pamwedzi, uye makumi maviri nemasere ane anopfuura miriyoni imwe yekurodha pamwedzi. Tichifunga nezve kurodha kwemamodule pamwe neketani yekutsamira, kukanganisa kwemaakaundi asina kuvimbika kunogona kukanganisa kusvika 20% yemamodule ese muNPM.
Source: opennet.ru