{"id":102561,"date":"2021-12-10T03:36:44","date_gmt":"2021-12-10T01:36:44","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/v-repozitorii-npm-vyyavleno-17-vredonosnyh-paketov"},"modified":"2021-12-10T03:36:44","modified_gmt":"2021-12-10T01:36:44","slug":"v-repozitorii-npm-vyyavleno-17-vredonosnyh-paketov","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/news\/v-repozitorii-npm-vyyavleno-17-vredonosnyh-paketov","title":{"rendered":"N\u00eb depozit\u00ebn NPM u zbuluan 17 paketa keqdash\u00ebse","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

N\u00eb depozit\u00ebn NPM u zbuluan 17 paketa keqdash\u00ebse q\u00eb shp\u00ebrndaheshin p\u00ebrmes typosquatting, pra duke u caktuar emra t\u00eb ngjash\u00ebm me bibliotekat e njohura, me llogaritjen q\u00eb p\u00ebrdoruesi t\u00eb b\u00ebnte nj\u00eb gabim shtypi gjat\u00eb futjes s\u00eb emrit ose t\u00eb mos i vinte re ndryshimet kur zgjidhte modulin nga lista. <\/p>\n

Paketat discord-selfbot-v14, discord-lofy, discordsystem dhe discord-vilao p\u00ebrdornin nj\u00eb variant t\u00eb modifikuar t\u00eb bibliotek\u00ebs legjitime discord.js, e cila ofron funksione p\u00ebr nd\u00ebrveprim me API t\u00eb Discord. Komponent\u00ebt keqdash\u00ebs ishin integruar n\u00eb nj\u00eb nga skedar\u00ebt e paket\u00ebs dhe p\u00ebrfshinin rreth 4000 rreshta kodi, t\u00eb maskuar p\u00ebrmes shtremb\u00ebrimit t\u00eb emrave t\u00eb variablave, enkriptimit t\u00eb vargjeve dhe prishjes s\u00eb formatimit t\u00eb kodit. Kodi skanonte sistemin lokal t\u00eb skedar\u00ebve p\u00ebr t\u00eb gjetur token\u00ebt e Discord dhe, n\u00ebse i zbulonte, i d\u00ebrgonte te server<\/a> t\u00eb sulmuesve. <\/p>\n

Paketa fix-error paraqitej si nj\u00eb mjet p\u00ebr korrigjimin e gabimeve n\u00eb Discord selfbot, por p\u00ebrfshinte aplikacionin trojan PirateStealer, i cili vidhte numra kartash krediti dhe llogari t\u00eb lidhura me Discord. Komponenti keqdash\u00ebs aktivizohej p\u00ebrmes injektimit t\u00eb kodit JavaScript n\u00eb klientin Discord. <\/p>\n

Paketa prerequests-xcode p\u00ebrfshinte nj\u00eb trojan p\u00ebr organizimin e qasjes n\u00eb distanc\u00eb n\u00eb sistemin e p\u00ebrdoruesit, i bazuar n\u00eb aplikacionin Python DiscordRAT. <\/p>\n

Supozohet se qasja te server\u00ebt e Discord mund t'u nevojitej sulmuesve p\u00ebr vendosjen e pikave t\u00eb komandimit t\u00eb botnetit, si proxy p\u00ebr shkarkimin e t\u00eb dh\u00ebnave nga sistemet e komprometuara, p\u00ebr fshehjen e gjurm\u00ebve gjat\u00eb kryerjes s\u00eb sulmeve, p\u00ebr shp\u00ebrndarjen e malware te p\u00ebrdoruesit e Discord ose p\u00ebr rishitjen e llogarive premium. <\/p>\n

Paketat wafer-bind, wafer-autocomplete, wafer-beacon, wafer-caas, wafer-toggle, wafer-geolocation, wafer-image, wafer-form, wafer-lightbox, octavius-public dhe mrg-message-broker p\u00ebrfshinin kod p\u00ebr d\u00ebrgimin e p\u00ebrmbajtjes s\u00eb variablave t\u00eb mjedisit, t\u00eb cilat, p\u00ebr shembull, mund t\u00eb p\u00ebrfshinin \u00e7el\u00ebsa aksesi, token\u00eb ose fjal\u00ebkalime p\u00ebr sistemet e integrimit t\u00eb vazhduesh\u00ebm ose mjedise cloud si AWS.
\n
Burimi: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0412 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0438 NPM \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043e 17 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 \u043f\u0430\u043a\u0435\u0442\u043e\u0432, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u043b\u0438\u0441\u044c \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0442\u0430\u0439\u043f\u0441\u043a\u0432\u043e\u0442\u0442\u0438\u043d\u0433\u0430, \u0442.\u0435. \u0441 \u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u0438\u0435\u043c \u0438\u043c\u0451\u043d \u043f\u043e\u0445\u043e\u0436\u0438\u0445 \u043d\u0430 \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u044f \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u044b\u0445 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a \u0441 \u0440\u0430\u0441\u0447\u0451\u0442\u043e\u043c \u043d\u0430 \u0442\u043e, \u0447\u0442\u043e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u0434\u043e\u043f\u0443\u0441\u0442\u0438\u0442 \u043e\u043f\u0435\u0447\u0430\u0442\u043a\u0443 \u043f\u0440\u0438 \u043d\u0430\u0431\u043e\u0440\u0435 \u0438\u043c\u0435\u043d\u0438 \u0438\u043b\u0438 \u043d\u0435 \u0437\u0430\u043c\u0435\u0442\u0438\u0442 \u0440\u0430\u0437\u043b\u0438\u0447\u0438\u0439, \u0432\u044b\u0431\u0438\u0440\u0430\u044f \u043c\u043e\u0434\u0443\u043b\u044c \u0438\u0437 \u0441\u043f\u0438\u0441\u043a\u0430. \u041f\u0430\u043a\u0435\u0442\u044b discord-selfbot-v14, discord-lofy, discordsystem \u0438 discord-vilao \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438 \u043c\u043e\u0434\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0432\u0430\u0440\u0438\u0430\u043d\u0442 \u043b\u0435\u0433\u0438\u0442\u0438\u043c\u043d\u043e\u0439 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438 discord.js, \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0449\u0435\u0439 \u0444\u0443\u043d\u043a\u0446\u0438\u0438 \u0434\u043b\u044f […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-102561","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47N\u00eb depozit\u00ebn NPM u zbuluan 17 paketa keqdash\u00ebse | ProHoster","description":"N\u00eb depozit\u00ebn NPM u zbuluan 17 paketa keqdash\u00ebse q\u00eb shp\u00ebrndaheshin p\u00ebrmes typosquatting, pra","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/news\/v-repozitorii-npm-vyyavleno-17-vredonosnyh-paketov","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0412 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0438 NPM \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043e 17 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 | ProHoster","og:description":"\u0412 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0438 NPM \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043e 17 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 \u043f\u0430\u043a\u0435\u0442\u043e\u0432, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u043b\u0438\u0441\u044c \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0442\u0430\u0439\u043f\u0441\u043a\u0432\u043e\u0442\u0442\u0438\u043d\u0433\u0430, \u0442.\u0435.","og:url":"https:\/\/prohoster.info\/sq\/blog\/news\/v-repozitorii-npm-vyyavleno-17-vredonosnyh-paketov","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2021-12-10T01:36:44+00:00","article:modified_time":"2021-12-10T01:36:44+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"102561","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-12-10 01:38:02","updated":"2022-09-30 15:02:40","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/102561","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=102561"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/102561\/revisions"}],"predecessor-version":[{"id":172961,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/102561\/revisions\/172961"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=102561"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=102561"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=102561"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}