{"id":139659,"date":"2025-07-21T11:12:05","date_gmt":"2025-07-21T09:12:05","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/fishing-pozvolil-poluchit-kontrol-nad-neskolkimi-populyarnymi-npm-paketami"},"modified":"2025-07-21T11:12:05","modified_gmt":"2025-07-21T09:12:05","slug":"fishing-pozvolil-poluchit-kontrol-nad-neskolkimi-populyarnymi-npm-paketami","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/news\/fishing-pozvolil-poluchit-kontrol-nad-neskolkimi-populyarnymi-npm-paketami","title":{"rendered":"Phishing ka lejuar marrjen e kontrollit mbi disa paketa t\u00eb njohura NPM.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"
\u00cbsht\u00eb regjistruar nj\u00eb sulm phishing ndaj mb\u00ebshtetjeve t\u00eb bibliotekave JavaScript, gjat\u00eb s\u00eb cil\u00ebs nga emri i sh\u00ebrbimit NPM u d\u00ebrgua nj\u00eb mesazh q\u00eb njoftonte nevoj\u00ebn p\u00ebr t\u00eb konfirmuar emailin tuaj. Sulmi i realizuar lejoi q\u00eb sulmuesit t\u00eb fitonin NPM-tokens e mb\u00ebshtet\u00ebsit t\u00eb nj\u00ebrit prej projekteve t\u00eb m\u00ebdha JavaScript dhe t\u00eb l\u00ebshonin p\u00ebrdit\u00ebsime me kod t\u00eb d\u00ebmsh\u00ebm p\u00ebr pes\u00eb NPM-paketa, q\u00eb n\u00eb total p\u00ebrb\u00ebjn\u00eb rreth 100 milion shkarkime n\u00eb jav\u00eb. <\/p>\n
Mesazhi i d\u00ebrguar nga shoq\u00ebruesi ishte stilizuar si njoftimet standarde NPM, t\u00eb d\u00ebrguara nga adresa «support@npmjs.org», por si lidhje p\u00ebr t\u00eb klikur ishte paraqitur domeni «npnjs.com» n\u00eb vend t\u00eb «npmjs.com» (litari i tret\u00eb «n» n\u00eb vend t\u00eb «m»). Sulmuesit shfryt\u00ebzuan efektin psikologjik, i cili b\u00ebn q\u00eb truri, duke parashikuar rezultatin e pritur, t\u00eb mos v\u00ebrej\u00eb shp\u00ebrthime t\u00eb vogla, si\u00e7 \u00ebsht\u00eb z\u00ebvend\u00ebsimi i shkronjave me t\u00eb ngjashme ose ndryshimi i rendit t\u00eb shkronjave n\u00eb fjal\u00eb. Kur klikohej mbi lidhjen, hapte nj\u00eb kopje t\u00eb plot\u00eb t\u00eb sitit npmjs.com (me sa duket ishte vendosur nj\u00eb proxy q\u00eb p\u00ebrfshinte tokenin e aksesit).
<\/center> <\/p>\n
Gjat\u00eb sulmit u formuan versione t\u00eb reja t\u00eb paketave: <\/p>\n
N\u00eb l\u00ebshimet e formuara ishte shtuar kod i d\u00ebmsh\u00ebm p\u00ebr t\u00eb sulmuar p\u00ebrdoruesit q\u00eb p\u00ebrdorin platform\u00ebn Windows. Ndryshimet e b\u00ebr\u00eb ngarkonin bibliotek\u00ebn node-gyp.dll, e cila p\u00ebrmbante funksionalitet p\u00ebr ekzekutimin e komandave n\u00eb distanc\u00eb n\u00eb sistem. <\/p>\n
Mb\u00ebshtet\u00ebsi vuri re se kishte r\u00ebn\u00eb viktim\u00eb e phishingut rreth nj\u00eb or\u00eb pas marrjes s\u00eb ankes\u00ebs s\u00eb par\u00eb p\u00ebr publikimin e l\u00ebshimeve t\u00eb dyshimta. Ai menj\u00ebher\u00eb t\u00ebrhoqi tokenin e aksesit, nd\u00ebrruan fjal\u00ebkalimet dhe sh\u00ebnoi versionet problematike si t\u00eb vjetruara p\u00ebr t\u00eb parandaluar shkarkimin e sistemeve automatike t\u00eb nd\u00ebrtimit dhe d\u00ebrgoi nj\u00eb k\u00ebrkes\u00eb p\u00ebr eliminimin e versioneve problematike nga repository n\u00eb sh\u00ebrbimin e mb\u00ebshtetjes NPM. <\/p>\n
Nuk \u00ebsht\u00eb sakt\u00ebsuar se sa p\u00ebrdorues arrit\u00ebn t\u00eb shkarkojn\u00eb versionet e d\u00ebmshme (p\u00ebr shembull, versioni i d\u00ebmsh\u00ebm i paket\u00ebs eslint-plugin-prettier ka q\u00ebndruar n\u00eb depo p\u00ebr rreth dy dit\u00eb). N\u00eb jav\u00ebn e kaluar, paketa eslint-config-prettier kishte 30 milion shkarkime dhe ishte p\u00ebrdorur si var\u00ebsi n\u00eb 11762 paketat, paketa eslint-plugin-prettier \u2014 21 milion shkarkime (8468 paketa var\u00ebsie), synckit \u2014 18 milion, @pkgr\/core \u2014 16 milion dhe napi-postinstall \u2014 10 milion. \n Burimi: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"
![\"Phishing](\"\/wp-content\/uploads\/2025\/07\/0d5e2613f7265b3fcca6ee367c0ecac9.png\")
<\/center> <\/p>\n