{"id":112714,"date":"2024-01-05T15:10:15","date_gmt":"2024-01-05T13:10:15","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/eksperiment-s-sozdaniem-npm-paketa-zavisimogo-ot-vseh-paketov-v-repozitorii"},"modified":"2024-01-05T15:10:15","modified_gmt":"2024-01-05T13:10:15","slug":"eksperiment-s-sozdaniem-npm-paketa-zavisimogo-ot-vseh-paketov-v-repozitorii","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/news\/eksperiment-s-sozdaniem-npm-paketa-zavisimogo-ot-vseh-paketov-v-repozitorii","title":{"rendered":"Eksperimenti p\u00ebr krijimin e nj\u00eb pakete NPM, e varur nga t\u00eb gjitha paketat n\u00eb depo","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Nj\u00eb nga zhvilluesit e paketave JavaScript kryeu nj\u00eb eksperiment me krijimin dhe publikimin n\u00eb depozitat NPM t\u00eb paket\u00ebs \u00abeverything\u00bb, e cila mbulon me var\u00ebsit\u00eb e saj t\u00eb gjitha paketat ekzistuese n\u00eb depo. P\u00ebr t\u00eb realizuar nj\u00eb mund\u00ebsi t\u00eb till\u00eb, paketa \u00abeverything\u00bb \u00ebsht\u00eb e lidhur me var\u00ebsi t\u00eb drejtp\u00ebrdrejta me pes\u00eb paketa \u00ab@everything-registry\/chunk-N\u00bb, t\u00eb cilat nga ana e tyre lidhen me var\u00ebsi nga m\u00eb shum\u00eb se 3000 paketa \u00absub-chunk-N\u00bb, n\u00eb secil\u00ebn prej t\u00eb cilave \u00ebsht\u00eb b\u00ebr\u00eb lidhja me 800 paketa ekzistuese n\u00eb depo. <\/p>\n

Publikimi i \u00abeverything\u00bb n\u00eb NPM solli dy efekte interesante. S\u00eb pari, paketa \u00abeverything\u00bb u shnd\u00ebrrua n\u00eb nj\u00eb mjet p\u00ebr kryerjen e sulmeve DoS, pasi p\u00ebrpjekja p\u00ebr ta instaluar at\u00eb \u00e7on n\u00eb shkarkimin e miliona paketave t\u00eb vendosura n\u00eb NPM dhe n\u00eb shterimin e hap\u00ebsir\u00ebs diskore t\u00eb disponueshme ose ndalimin e proceseve t\u00eb nd\u00ebrtimit. Sipas statistikave, paketa NPM \u00ebsht\u00eb shkarkuar rreth 250 her\u00eb, por askush nuk e pengon at\u00eb t\u00eb shtohet n\u00eb var\u00ebsi t\u00eb ndonj\u00eb pakete tjet\u00ebr pas hakimit t\u00eb llogaris\u00eb s\u00eb zhvilluesit p\u00ebr t\u00eb kryer diversione. P\u00ebr m\u00eb tep\u00ebr, pa dashur, disa sh\u00ebrbime dhe mjete q\u00eb kryejn\u00eb monitorim dhe kontroll t\u00eb paketave t\u00eb reja t\u00eb publikuara n\u00eb NPM p\u00ebsuan sulme. <\/p>\n

S\u00eb dyti, publikimi i paket\u00ebs \u00abeverything\u00bb n\u00eb fakt bllokoi mund\u00ebsin\u00eb e fshirjes s\u00eb \u00e7do pakete n\u00eb NPM q\u00eb u gjet\u00ebn n\u00eb list\u00ebn e var\u00ebsive t\u00eb saj. Nj\u00eb paket\u00eb nga NPM mund t\u00eb fshihet nga autori vet\u00ebm n\u00ebse nuk p\u00ebrdoret m\u00eb par\u00eb n\u00eb var\u00ebsi t\u00eb paketeve t\u00eb tjera, por pas publikimit t\u00eb \u00abeverything\u00bb, var\u00ebsit\u00eb p\u00ebrfshin\u00eb t\u00eb gjitha paketat n\u00eb depo. Vlen t\u00eb theksohet se edhe fshirja e vet\u00eb paket\u00ebs \u00abeverything\u00bb u bllokua gjithashtu, pasi 9 vjet m\u00eb par\u00eb n\u00eb depo ishte publikuar nj\u00eb paket\u00eb testuese \u00abeverything-else\u00bb, n\u00eb t\u00eb cil\u00ebn ishte e specifikuar linja \u00abeverything\u00bb n\u00eb list\u00ebn e var\u00ebsive. K\u00ebshtu, pas publikimit, paketa \u00abeverything\u00bb u b\u00eb var\u00ebsi e nj\u00eb pakete tjet\u00ebr.
\n
Burimi: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041e\u0434\u0438\u043d \u0438\u0437 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u043e\u0432 JavaScript-\u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u043f\u0440\u043e\u0432\u0451\u043b \u044d\u043a\u0441\u043f\u0435\u0440\u0438\u043c\u0435\u043d\u0442 \u0441 \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u0435\u043c \u0438 \u0440\u0430\u0437\u043c\u0435\u0449\u0435\u043d\u0438\u0435\u043c \u0432 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0438 NPM \u043f\u0430\u043a\u0435\u0442\u0430 «everything», \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043e\u0445\u0432\u0430\u0442\u044b\u0432\u0430\u0435\u0442 \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u044f\u043c\u0438 \u0432\u0441\u0435 \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u0435 \u043f\u0430\u043a\u0435\u0442\u044b \u0432 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0438. \u0414\u043b\u044f \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u043f\u043e\u0434\u043e\u0431\u043d\u043e\u0439 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u043f\u0430\u043a\u0435\u0442 «everything» \u0441\u0432\u044f\u0437\u0430\u043d \u043f\u0440\u044f\u043c\u044b\u043c\u0438 \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u044f\u043c\u0438 \u0441 \u043f\u044f\u0442\u044c\u044e \u043f\u0430\u043a\u0435\u0442\u0430\u043c\u0438 «@everything-registry\/chunk-N», \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0432 \u0441\u0432\u043e\u044e \u043e\u0447\u0435\u0440\u0435\u0434\u044c \u043f\u0440\u0438\u0432\u044f\u0437\u044b\u0432\u0430\u044e\u0442\u0441\u044f \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u044f\u043c\u0438 \u043a \u0431\u043e\u043b\u0435\u0435 3000 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 «sub-chunk-N», \u0432 \u043a\u0430\u0436\u0434\u043e\u043c \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043f\u0440\u0438\u0432\u044f\u0437\u043a\u0430 \u043a 800 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-112714","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47 Eksperimenti p\u00ebr krijimin e nj\u00eb pakete NPM, e varur nga t\u00eb gjitha paketat n\u00eb depo | ProHoster","description":"Nj\u00eb nga zhvilluesit e pakove JavaScript ka kryer nj\u00eb eksperiment p\u00ebr krijimin dhe publikimin n\u00eb depo t\u00eb paketes \"everything\", e cila mbulon si var\u00ebsira t\u00eb gjitha paketat ekzistuese n\u00eb depo.","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/news\/eksperiment-s-sozdaniem-npm-paketa-zavisimogo-ot-vseh-paketov-v-repozitorii","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u042d\u043a\u0441\u043f\u0435\u0440\u0438\u043c\u0435\u043d\u0442 \u0441 \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u0435\u043c NPM-\u043f\u0430\u043a\u0435\u0442\u0430, \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0433\u043e \u043e\u0442 \u0432\u0441\u0435\u0445 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u0432 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0438 | ProHoster","og:description":"\u041e\u0434\u0438\u043d \u0438\u0437 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u043e\u0432 JavaScript-\u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u043f\u0440\u043e\u0432\u0451\u043b \u044d\u043a\u0441\u043f\u0435\u0440\u0438\u043c\u0435\u043d\u0442 \u0441 \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u0435\u043c \u0438 \u0440\u0430\u0437\u043c\u0435\u0449\u0435\u043d\u0438\u0435\u043c \u0432 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0438 NPM \u043f\u0430\u043a\u0435\u0442\u0430 "everything", \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043e\u0445\u0432\u0430\u0442\u044b\u0432\u0430\u0435\u0442 \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u044f\u043c\u0438 \u0432\u0441\u0435 \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u0435 \u043f\u0430\u043a\u0435\u0442\u044b \u0432 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0438.","og:url":"https:\/\/prohoster.info\/sq\/blog\/news\/eksperiment-s-sozdaniem-npm-paketa-zavisimogo-ot-vseh-paketov-v-repozitorii","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2024-01-05T13:10:15+00:00","article:modified_time":"2024-01-05T13:10:15+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/112714","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=112714"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/112714\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=112714"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=112714"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=112714"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}