Organizata OpenSSF (Open Source Security Foundation), e krijuar n\u00ebn mbrojtjen e Linux Foundation p\u00ebr t\u00eb rritur sigurin\u00eb e softuerit t\u00eb hapur, i ka paralajm\u00ebruar komunitetet p\u00ebr zbulimin e aktiviteteve q\u00eb lidhen me p\u00ebrpjekjet p\u00ebr t\u00eb marr kontrollin mbi projektet popullore t\u00eb hapura, t\u00eb ngjashme me stilin e veprimit t\u00eb k\u00ebrc\u00ebnuesve gjat\u00eb p\u00ebrgatitjeve p\u00ebr t\u00eb futur nj\u00eb backdoor n\u00eb projektin xz. Ngjash\u00ebm, n\u00eb sulmin ndaj xz, individ\u00eb t\u00eb dyshimt\u00eb, t\u00eb cil\u00ebt m\u00eb par\u00eb nuk kishin qen\u00eb thell\u00ebsisht t\u00eb angazhuar n\u00eb zhvillim, p\u00ebrpiqeshin t\u00eb p\u00ebrdornin metoda t\u00eb inxhinieris\u00eb sociale p\u00ebr t\u00eb arritur q\u00ebllimet e tyre. <\/p>\n
Sulmuesit hyjn\u00eb n\u00eb korrespondenc\u00eb me an\u00ebtar\u00ebt e bordit menaxhues t\u00eb organizat\u00ebs OpenJS Foundation, e cila sh\u00ebrben si nj\u00eb platform\u00eb neutrale p\u00ebr zhvillimin e p\u00ebrbashk\u00ebt t\u00eb projekteve t\u00eb hapura n\u00eb JavaScript, si Node.js, jQuery, Appium, Dojo, PEP, Mocha dhe webpack. N\u00eb korrespondenc\u00ebn, n\u00eb t\u00eb cil\u00ebn merrnin pjes\u00eb disa zhvillues t\u00eb jasht\u00ebm me histori t\u00eb dyshimt\u00eb n\u00eb zhvillimin e softuerit t\u00eb hapur, u b\u00ebn\u00eb p\u00ebrpjekje p\u00ebr t\u00eb bindur drejtuesit p\u00ebr nevoj\u00ebn e azhurnimit t\u00eb nj\u00eb prej projekteve popullore JavaScript, t\u00eb mbik\u00ebqyrura nga organizata OpenJS. <\/p>\n
Si nj\u00eb arsye p\u00ebr p\u00ebrdit\u00ebsimin u p\u00ebrmend nevoja p\u00ebr t\u00eb shtuar \"mbrojtjen nga \u00e7do dob\u00ebsi kritike\". Megjithat\u00eb, nuk u dhan\u00eb detaje mbi natyr\u00ebn e dob\u00ebsive. P\u00ebr t\u00eb realizuar ndryshimet, zhvilluesi i dyshimt\u00eb propozi nj\u00eb p\u00ebrfshirje n\u00eb mesin e atyre q\u00eb mb\u00ebshtesin projektin, n\u00eb t\u00eb cilin ai m\u00eb par\u00eb kishte marr\u00eb vet\u00ebm nj\u00eb pjes\u00ebmarrje t\u00eb vog\u00ebl. P\u00ebr m\u00eb tep\u00ebr, skenar\u00eb t\u00eb ngjash\u00ebm t\u00eb dyshimt\u00eb p\u00ebr imponimin e kodit jan\u00eb zbuluar gjithashtu n\u00eb dy projekte t\u00eb njohura JavaScript, t\u00eb cilat nuk kan\u00eb lidhje me organizat\u00ebn OpenJS. Supozohet se rastet nuk jan\u00eb t\u00eb vetme dhe mb\u00ebshtet\u00ebsit e projekteve t\u00eb hapura duhet t\u00eb mos humbasin vigjilenc\u00ebn gjat\u00eb pranimit t\u00eb kodit dhe miratimin e zhvilluesve t\u00eb rinj. <\/p>\n
Mes shenjave q\u00eb mund t\u00eb tregojn\u00eb p\u00ebr aktivitete keqdash\u00ebse p\u00ebrfshihet ngacmimi i njohur mir\u00eb, por nj\u00ebkoh\u00ebsisht agresiv dhe k\u00ebmb\u00ebngul\u00ebs, nga pjes\u00ebtar\u00eb t\u00eb panjohur t\u00eb komunitetit ndaj mb\u00ebshtet\u00ebsve ose drejtuesve t\u00eb projekteve me iden\u00eb e promovimit t\u00eb kodit t\u00eb tyre ose ofrimit t\u00eb statusit t\u00eb mb\u00ebshtet\u00ebsit. Gjithashtu, \u00ebsht\u00eb e r\u00ebnd\u00ebsishme t\u00eb v\u00ebrehet shfaqja e nj\u00eb grupi mb\u00ebshtetjeje rreth ideve t\u00eb promovuara, e formuar nga persona t\u00eb shpikur, q\u00eb m\u00eb par\u00eb nuk kishin marr\u00eb pjes\u00eb n\u00eb zhvillim ose ishin bashkuar s\u00eb fundmi me komunitetin. <\/p>\n
N\u00eb pranimin e ndryshimeve, duhen marr\u00eb parasysh si shenja t\u00eb veprimeve potencialisht keqdash\u00ebse p\u00ebrpjekjet p\u00ebr t\u00eb p\u00ebrfshir\u00eb t\u00eb dh\u00ebna binar\u00eb n\u00eb k\u00ebrkesat p\u00ebr bashkimin (p.sh. n\u00eb xz, backdoor-i u d\u00ebrgua n\u00eb arkiva p\u00ebr testimin e shkruesit t\u00eb shkarkimeve) ose kodin e ngat\u00ebrruar ose t\u00eb v\u00ebshtir\u00eb p\u00ebr t'u kuptuar. Duhet t\u00eb vihen re p\u00ebrpjekjet provuese p\u00ebr t\u00eb b\u00ebr\u00eb ndryshime q\u00eb paksa zvog\u00eblojn\u00eb sigurin\u00eb, t\u00eb d\u00ebrguara p\u00ebr t\u00eb vler\u00ebsuar reagimin e komunitetit dhe p\u00ebr t\u00eb verifikuar pranin\u00eb e individ\u00ebve q\u00eb ndjekin ndryshimet (p.sh. n\u00eb xz funksioni Safe_fprintf u z\u00ebvend\u00ebsua me fprintf). Dyshimi duhet t\u00eb ngjallin gjithashtu ndryshime jo t\u00eb zakonshme n\u00eb metodat e kompajtimit, nd\u00ebrtimit dhe shp\u00ebrndarjes s\u00eb projektit, angazhimin e artefakteve t\u00eb jashtme dhe nxitjen e nj\u00eb ndjenje urgjente p\u00ebr t\u00eb pranuar ndryshimet. \u041e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u044f OpenSSF (Open Source Security Foundation), \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u0430\u044f \u043f\u043e\u0434 \u043f\u043e\u043a\u0440\u043e\u0432\u0438\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u043e\u043c Linux Foundation \u0434\u043b\u044f \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u0433\u043e \u041f\u041e, \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0434\u0438\u043b\u0430 \u0441\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u043e \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u0438 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u0438, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u043e\u0439 \u0441 \u043f\u043e\u043f\u044b\u0442\u043a\u0430\u043c\u0438 \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044f \u043d\u0430\u0434 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u044b\u043c\u0438 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c\u0438 \u043f\u0440\u043e\u0435\u043a\u0442\u0430\u043c\u0438, \u043d\u0430\u043f\u043e\u043c\u0438\u043d\u0430\u044e\u0449\u0435\u0439 \u043f\u043e \u0441\u0432\u043e\u0435\u043c\u0443 \u0441\u0442\u0438\u043b\u044e \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u0432 \u0432 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0435 \u043f\u043e\u0434\u0433\u043e\u0442\u043e\u0432\u043a\u0438 \u043a \u043f\u043e\u0434\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0435 \u0431\u044d\u043a\u0434\u043e\u0440\u0430 \u0432 \u043f\u0440\u043e\u0435\u043a\u0442 xz. \u041f\u043e \u0430\u043d\u0430\u043b\u043e\u0433\u0438\u0438 \u0430\u0442\u0430\u043a\u043e\u0439 \u043d\u0430 xz \u0441\u043e\u043c\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u043b\u0438\u0447\u043d\u043e\u0441\u0442\u0438, \u0440\u0430\u043d\u0435\u0435 \u0433\u043b\u0443\u0431\u043e\u043a\u043e \u043d\u0435 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-115126","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47P\u00ebrpjekjet p\u00ebr t\u00eb marr\u00eb kontrollin mbi projektet e hapura, t\u00eb ngjashme me rastin e paket\u00ebs xz | ProHoster","description":"Organizata OpenSSF (Open Source Security Foundation), e krijuar n\u00ebn mb\u00ebshtetje t\u00eb Fondacionit Linux p\u00ebr t\u00eb rritur sigurin\u00eb e softuerit t\u00eb hapur, paralajm\u00ebroi komunitetin p\u00ebr identifikimin e aktiviteteve q\u00eb lidhen me p\u00ebrpjekjet.","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/news\/popytki-polucheniya-kontrolya-nad-otkrytymi-proektami-pohozhie-na-sluchaj-s-paketom-xz","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041f\u043e\u043f\u044b\u0442\u043a\u0438 \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044f \u043d\u0430\u0434 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c\u0438 \u043f\u0440\u043e\u0435\u043a\u0442\u0430\u043c\u0438, \u043f\u043e\u0445\u043e\u0436\u0438\u0435 \u043d\u0430 \u0441\u043b\u0443\u0447\u0430\u0439 \u0441 \u043f\u0430\u043a\u0435\u0442\u043e\u043c xz | ProHoster","og:description":"\u041e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u044f OpenSSF (Open Source Security Foundation), \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u0430\u044f \u043f\u043e\u0434 \u043f\u043e\u043a\u0440\u043e\u0432\u0438\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u043e\u043c Linux Foundation \u0434\u043b\u044f \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u0433\u043e \u041f\u041e, \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0434\u0438\u043b\u0430 \u0441\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u043e \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u0438 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u0438, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u043e\u0439 \u0441 \u043f\u043e\u043f\u044b\u0442\u043a\u0430\u043c\u0438.","og:url":"https:\/\/prohoster.info\/sq\/blog\/news\/popytki-polucheniya-kontrolya-nad-otkrytymi-proektami-pohozhie-na-sluchaj-s-paketom-xz","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2024-04-17T12:30:08+00:00","article:modified_time":"2024-04-17T12:30:08+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"115126","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-22 22:31:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-01-22 22:31:19","updated":"2026-01-22 22:31:19","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/115126","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=115126"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/115126\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=115126"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=115126"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=115126"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}
\n
Burimi: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"