N\u00eb depozitat NPM \u00ebsht\u00eb p\u00ebrfshir\u00eb zbatimi i dyfaktor\u00ebs autentifikimi t\u00eb detyruesh\u00ebm p\u00ebr llogarit\u00eb q\u00eb mb\u00ebshtesin 500 paketat m\u00eb t\u00eb njohura NPM. Si kriter p\u00ebr popullaritetin \u00ebsht\u00eb p\u00ebrdorur numri i paketeve t\u00eb varura. Ata q\u00eb mb\u00ebshtesin paketat e p\u00ebrfshira n\u00eb list\u00eb do t\u00eb jen\u00eb n\u00eb gjendje t\u00eb kryejn\u00eb operacione t\u00eb lidhura me ndryshimin e depozitave vet\u00ebm pasi t\u00eb ken\u00eb aktivizuar autentifikimin dyfaktor, i cili k\u00ebrkon miratimin e hyrjes p\u00ebrmes kodeve t\u00eb p\u00ebrkohshme (TOTP), t\u00eb gjeneruara nga aplikacione si Authy, Google Authenticator dhe FreeOTP, ose \u00e7el\u00ebsave harduerik\u00eb dhe skaner\u00ebve biometrik\u00eb q\u00eb mb\u00ebshtesin protokollin WebAuth. <\/p>\n
Ky \u00ebsht\u00eb hapi i tret\u00eb p\u00ebr forcuar mbrojtjen e NPM nga komprometimi i llogarive. N\u00eb hapin e par\u00eb, u realizua transferimi i t\u00eb gjitha llogarive NPM, p\u00ebr t\u00eb cilat nuk \u00ebsht\u00eb aktivizuar autentifikimi dyfaktor, n\u00eb p\u00ebrdorimin e verifikimit t\u00eb zgjeruar t\u00eb llogarive, q\u00eb k\u00ebrkon hyrjen e nj\u00eb kodi t\u00eb p\u00ebrkohsh\u00ebm, i d\u00ebrguar n\u00eb email kur p\u00ebrpiqesh t\u00eb hysh n\u00eb sitin npmjs.com ose t\u00eb kryesh nj\u00eb operacion t\u00eb autentifikuar n\u00eb utilitarin npm. N\u00eb hapat e dyt\u00eb, autentifikimi dyfaktor i detyruesh\u00ebm u aktivizua p\u00ebr 100 paketat m\u00eb t\u00eb njohura. <\/p>\n
Kujtojm\u00eb se sipas nj\u00eb studimi t\u00eb kryer n\u00eb vitin 2020, vet\u00ebm 9.27% e mbajt\u00ebsve t\u00eb paketave p\u00ebrdor\u00ebn autentifikimin me dy faktor\u00eb p\u00ebr t\u00eb siguruar qasjen, nd\u00ebrsa n\u00eb 13.37% t\u00eb rasteve, gjat\u00eb regjistrimit t\u00eb llogarive t\u00eb reja, zhvilluesit p\u00ebrpiqeshin t\u00eb rind\u00ebrtonin fjal\u00ebkalimet e kompromentuara q\u00eb ishin p\u00ebrfshir\u00eb n\u00eb shp\u00ebrthimet e njohura t\u00eb fjal\u00ebkalimeve. Gjat\u00eb verifikimit t\u00eb besueshm\u00ebris\u00eb s\u00eb fjal\u00ebkalimeve t\u00eb p\u00ebrdorura, arrit\u00ebm t\u00eb aksesojm\u00eb 12% t\u00eb llogarive n\u00eb NPM (13% t\u00eb paketave) p\u00ebr shkak t\u00eb p\u00ebrdorimit t\u00eb fjal\u00ebkalimeve t\u00eb parashikueshme dhe triviale, si \"123456\". N\u00eb mesin e problemeve ishin 4 llogari p\u00ebrdoruesish nga Top20 paketave m\u00eb t\u00eb njohura, 13 llogari t\u00eb paketave q\u00eb jan\u00eb shkarkuar m\u00eb shum\u00eb se 50 milion her\u00eb n\u00eb muaj, 40 q\u00eb kishin m\u00eb shum\u00eb se 10 milion shkarkime n\u00eb muaj dhe 282 me m\u00eb shum\u00eb se 1 milion shkarkime n\u00eb muaj. Duke marr\u00eb parasysh shkarkimin e modulve p\u00ebrmes var\u00ebsive, kompromentimi i llogarive t\u00eb pa sigurta mund t\u00eb kishte prekur deri n\u00eb 52% t\u00eb t\u00eb gjith\u00eb moduleve n\u00eb NPM. \u0412 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0438 NPM \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u043e \u043f\u0440\u0438\u043c\u0435\u043d\u0435\u043d\u0438\u0435 \u043e\u0431\u044f\u0437\u0430\u0442\u0435\u043b\u044c\u043d\u043e\u0439 \u0434\u0432\u0443\u0445\u0444\u0430\u043a\u0442\u043e\u0440\u043d\u043e\u0439 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0434\u043b\u044f \u0443\u0447\u0451\u0442\u043d\u044b\u0445 \u0437\u0430\u043f\u0438\u0441\u0435\u0439 \u0441\u043e\u043f\u0440\u043e\u0432\u043e\u0436\u0434\u0430\u044e\u0449\u0438\u0445 500 \u0441\u0430\u043c\u044b\u0445 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u044b\u0445 NPM-\u043f\u0430\u043a\u0435\u0442\u043e\u0432. \u0412 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u043a\u0440\u0438\u0442\u0435\u0440\u0438\u044f \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u0441\u0442\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u043e \u0447\u0438\u0441\u043b\u043e \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u044b\u0445 \u043f\u0430\u043a\u0435\u0442\u043e\u0432. \u0421\u043e\u043f\u0440\u043e\u0432\u043e\u0436\u0434\u0430\u044e\u0449\u0438\u0435 \u043f\u043e\u043f\u0430\u0432\u0448\u0438\u0445 \u0432 \u0441\u043f\u0438\u0441\u043e\u043a \u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u0441\u043c\u043e\u0433\u0443\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0435 \u0441 \u0432\u043d\u0435\u0441\u0435\u043d\u0438\u0435\u043c \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0439 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0438 \u0441 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0435\u043c \u0442\u043e\u043b\u044c\u043a\u043e \u043f\u043e\u0441\u043b\u0435 \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f \u0434\u0432\u0443\u0445\u0444\u0430\u043a\u0442\u043e\u0440\u043d\u043e\u0439 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438, \u0442\u0440\u0435\u0431\u0443\u044e\u0449\u0435\u0439 \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0438\u044f \u0432\u0445\u043e\u0434\u0430 \u043f\u0440\u0438 \u043f\u043e\u043c\u043e\u0449\u0438 \u043e\u0434\u043d\u043e\u0440\u0430\u0437\u043e\u0432\u044b\u0445 \u043f\u0430\u0440\u043e\u043b\u0435\u0439 (TOTP), \u0433\u0435\u043d\u0435\u0440\u0438\u0440\u0443\u0435\u043c\u044b\u0445 \u0442\u0430\u043a\u0438\u043c\u0438 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f\u043c\u0438, \u043a\u0430\u043a […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-104203","post","type-post","status-publish","format-standard","hentry","category-novosti-interneta"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Autentifikimi dyfaktor i detyruesh\u00ebm p\u00ebr 500 paketat m\u00eb t\u00eb njohura n\u00eb NPM | ProHoster","description":"N\u00eb depozitat NPM \u00ebsht\u00eb p\u00ebrfshir\u00eb zbatimi i dyfaktor\u00ebs autentifikimi t\u00eb detyruesh\u00ebm p\u00ebr llogarit\u00eb q\u00eb mb\u00ebshtesin 500 paketat m\u00eb t\u00eb njohura NPM. Si kriter p\u00ebr popullaritetin \u00ebsht\u00eb p\u00ebrdorur numri i paketeve t\u00eb varura. Ata q\u00eb mb\u00ebshtesin paketat e p\u00ebrfshira n\u00eb list\u00eb do t\u00eb jen\u00eb n\u00eb gjendje t\u00eb kryejn\u00eb operacione t\u00eb lidhura me ndryshimin e depozitave vet\u00ebm pasi t\u00eb ken\u00eb aktivizuar autentifikimin dyfaktor, i cili k\u00ebrkon miratimin e hyrjes p\u00ebrmes kodeve t\u00eb p\u00ebrkohshme (TOTP), t\u00eb gjeneruara nga aplikacione si","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/v-npm-vklyuchena-obyazatelnaya-dvuhfaktornaya-autentifikacziya-dlya-500-samyh-populyarnyh-paketov","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0412 NPM \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u0430 \u043e\u0431\u044f\u0437\u0430\u0442\u0435\u043b\u044c\u043d\u0430\u044f \u0434\u0432\u0443\u0445\u0444\u0430\u043a\u0442\u043e\u0440\u043d\u0430\u044f \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044f \u0434\u043b\u044f 500 \u0441\u0430\u043c\u044b\u0445 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u044b\u0445 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 | ProHoster","og:description":"\u0412 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0438 NPM \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u043e \u043f\u0440\u0438\u043c\u0435\u043d\u0435\u043d\u0438\u0435 \u043e\u0431\u044f\u0437\u0430\u0442\u0435\u043b\u044c\u043d\u043e\u0439 \u0434\u0432\u0443\u0445\u0444\u0430\u043a\u0442\u043e\u0440\u043d\u043e\u0439 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0434\u043b\u044f \u0443\u0447\u0451\u0442\u043d\u044b\u0445 \u0437\u0430\u043f\u0438\u0441\u0435\u0439 \u0441\u043e\u043f\u0440\u043e\u0432\u043e\u0436\u0434\u0430\u044e\u0449\u0438\u0445 500 \u0441\u0430\u043c\u044b\u0445 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u044b\u0445 NPM-\u043f\u0430\u043a\u0435\u0442\u043e\u0432. \u0412 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u043a\u0440\u0438\u0442\u0435\u0440\u0438\u044f \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u0441\u0442\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u043e \u0447\u0438\u0441\u043b\u043e \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u044b\u0445 \u043f\u0430\u043a\u0435\u0442\u043e\u0432. \u0421\u043e\u043f\u0440\u043e\u0432\u043e\u0436\u0434\u0430\u044e\u0449\u0438\u0435 \u043f\u043e\u043f\u0430\u0432\u0448\u0438\u0445 \u0432 \u0441\u043f\u0438\u0441\u043e\u043a \u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u0441\u043c\u043e\u0433\u0443\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0435 \u0441 \u0432\u043d\u0435\u0441\u0435\u043d\u0438\u0435\u043c \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0439 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0438 \u0441 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0435\u043c \u0442\u043e\u043b\u044c\u043a\u043e \u043f\u043e\u0441\u043b\u0435 \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f \u0434\u0432\u0443\u0445\u0444\u0430\u043a\u0442\u043e\u0440\u043d\u043e\u0439 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438, \u0442\u0440\u0435\u0431\u0443\u044e\u0449\u0435\u0439 \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0438\u044f \u0432\u0445\u043e\u0434\u0430 \u043f\u0440\u0438 \u043f\u043e\u043c\u043e\u0449\u0438 \u043e\u0434\u043d\u043e\u0440\u0430\u0437\u043e\u0432\u044b\u0445 \u043f\u0430\u0440\u043e\u043b\u0435\u0439 (TOTP), \u0433\u0435\u043d\u0435\u0440\u0438\u0440\u0443\u0435\u043c\u044b\u0445 \u0442\u0430\u043a\u0438\u043c\u0438 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f\u043c\u0438, \u043a\u0430\u043a","og:url":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/v-npm-vklyuchena-obyazatelnaya-dvuhfaktornaya-autentifikacziya-dlya-500-samyh-populyarnyh-paketov","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2022-06-01T07:37:06+00:00","article:modified_time":"2022-06-01T07:37:06+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"104203","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-25 11:25:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2022-06-01 07:38:16","updated":"2026-01-25 11:25:19","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/104203","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=104203"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/104203\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=104203"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=104203"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=104203"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}
\n
Burimi: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"