{"id":95989,"date":"2020-10-06T01:43:14","date_gmt":"2020-10-05T23:43:14","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/v-repozitorii-npm-vyyavleny-chetyre-paketa-peresylayushhie-dannye-o-polzovatele"},"modified":"2020-10-06T01:43:14","modified_gmt":"2020-10-05T23:43:14","slug":"v-repozitorii-npm-vyyavleny-chetyre-paketa-peresylayushhie-dannye-o-polzovatele","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/news\/v-repozitorii-npm-vyyavleny-chetyre-paketa-peresylayushhie-dannye-o-polzovatele","title":{"rendered":"N\u00eb depozitat NPM jan\u00eb identifikuar kat\u00ebr paketa q\u00eb d\u00ebrgojn\u00eb t\u00eb dh\u00ebna p\u00ebr p\u00ebrdoruesin","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

N\u00eb depozitat NPM u zbulua<\/a><\/noindex> aktivitet i d\u00ebmsh\u00ebm n\u00eb kat\u00ebr paketa, q\u00eb p\u00ebrfshijn\u00eb nj\u00eb skenar preinstall, i cili para instalimit t\u00eb paket\u00ebs d\u00ebrgonte n\u00eb GitHub nj\u00eb koment me informacion n\u00eb lidhje me adres\u00ebn IP, vendndodhjen, emrin e p\u00ebrdoruesit, modelin e CPU-s\u00eb dhe katalogun sht\u00ebpiak t\u00eb p\u00ebrdoruesit. Kodi i d\u00ebmsh\u00ebm u gjet n\u00eb paketat electorn<\/a><\/noindex> (255 shkarkime), lodashs<\/a><\/noindex> (78 shkarkime), loadyaml<\/a><\/noindex> (48 shkarkime) dhe loadyml<\/a><\/noindex> (37 shkarkime). <\/p>\n

\"N\u00eb<\/a><\/noindex><\/center><\/p>\n

Paketat problematike ishin vendosur n\u00eb NPM nga 17 deri n\u00eb 24 gusht p\u00ebr shp\u00ebrndarje duke p\u00ebrdorur typsquatting<\/a><\/noindex>, dmth. duke u dh\u00ebn\u00eb emra t\u00eb ngjash\u00ebm me emrat e librarive t\u00eb tjera t\u00eb njohura me shpres\u00ebn q\u00eb p\u00ebrdoruesi do t\u00eb b\u00ebnte nj\u00eb gabim kur t\u00eb shkruante emrin ose nuk do t\u00eb v\u00ebrente diferencat kur zgjidhte nj\u00eb modul nga lista. Sipas numrit t\u00eb shkarkimeve, rreth 400 p\u00ebrdorues e kan\u00eb r\u00ebn\u00eb n\u00eb k\u00ebt\u00eb mashtrim, shumica e t\u00eb cil\u00ebve confuzuan electorn me electron. Aktualisht paketat electorn dhe loadyaml tashm\u00eb<\/a><\/noindex> jan\u00eb fshir\u00eb<\/a><\/noindex> nga administrata e NPM, nd\u00ebrsa paketat lodashs dhe loadyml jan\u00eb fshir\u00eb nga autori.<\/p>\n

Motivet e sulmuesve jan\u00eb t\u00eb panjohura, por supozohet se rrjedhja e informacionit p\u00ebrmes GitHub (komentet d\u00ebrgoheshin p\u00ebrmes Issue dhe hiqeshin brenda nj\u00eb dite) mund t\u00eb jet\u00eb kryer si pjes\u00eb e nj\u00eb eksperimentimi p\u00ebr t\u00eb vler\u00ebsuar efikasitetin e metod\u00ebs, ose mund t\u00eb ishte nj\u00eb sulm i planifikuar n\u00eb disa faza, ku n\u00eb faz\u00ebn e par\u00eb mblidheshin t\u00eb dh\u00ebnat mbi viktimat, nd\u00ebrsa n\u00eb faz\u00ebn e dyt\u00eb, e cila nuk u realizua p\u00ebr shkak t\u00eb bllokimit, sulmuesit kishin nd\u00ebrmend t\u00eb l\u00ebshonin nj\u00eb p\u00ebrdit\u00ebsim me p\u00ebrfshirjen e nj\u00eb kodi t\u00eb d\u00ebmsh\u00ebm m\u00eb t\u00eb rreziksh\u00ebm ose nj\u00eb backdoor n\u00eb versionin e ri.<\/p>\n

<\/a><\/noindex><\/p>\n

Burimi: opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0412 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0438 NPM \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u0430\u044f \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c \u0432 \u0447\u0435\u0442\u044b\u0440\u0451\u0445 \u043f\u0430\u043a\u0435\u0442\u0430\u0445, \u0432\u043a\u043b\u044e\u0447\u0430\u044e\u0449\u0438\u0445 preinstall-\u0441\u043a\u0440\u0438\u043f\u0442, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u0435\u0440\u0435\u0434 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u043e\u0439 \u043f\u0430\u043a\u0435\u0442\u0430 \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u043b \u043d\u0430 GitHub \u043a\u043e\u043c\u043c\u0435\u043d\u0442\u0430\u0440\u0438\u0439 \u0441 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0435\u0439 \u043e\u0431 IP-\u0430\u0434\u0440\u0435\u0441\u0435, \u043c\u0435\u0441\u0442\u043e\u043f\u043e\u043b\u043e\u0436\u0435\u043d\u0438\u0438, \u043b\u043e\u0433\u0438\u043d\u0435, \u043c\u043e\u0434\u0435\u043b\u0438 CPU \u0438 \u0434\u043e\u043c\u0430\u0448\u043d\u0435\u043c \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f. \u0412\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u043a\u043e\u0434 \u0431\u044b\u043b \u043d\u0430\u0439\u0434\u0435\u043d \u0432 \u043f\u0430\u043a\u0435\u0442\u0430\u0445 electorn (255 \u0437\u0430\u0433\u0440\u0443\u0437\u043e\u043a), lodashs (78 \u0437\u0430\u0433\u0440\u0443\u0437\u043e\u043a), loadyaml (48 \u0437\u0430\u0433\u0440\u0443\u0437\u043e\u043a) \u0438 loadyml (37 \u0437\u0430\u0433\u0440\u0443\u0437\u043e\u043a). \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u043d\u044b\u0435 \u043f\u0430\u043a\u0435\u0442\u044b \u0431\u044b\u043b\u0438 \u0440\u0430\u0437\u043c\u0435\u0449\u0435\u043d\u044b \u0432 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":95990,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-95989","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47N\u00eb depozitat NPM jan\u00eb identifikuar kat\u00ebr paketa q\u00eb d\u00ebrgojn\u00eb t\u00eb dh\u00ebna p\u00ebr p\u00ebrdoruesin | ProHoster","description":"N\u00eb depozitat NPM \u00ebsht\u00eb identifikuar aktivitet i d\u00ebmsh\u00ebm n\u00eb kat\u00ebr paketa q\u00eb p\u00ebrfshijn\u00eb nj\u00eb skenar preinstall.","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/news\/v-repozitorii-npm-vyyavleny-chetyre-paketa-peresylayushhie-dannye-o-polzovatele","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0412 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0438 NPM \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u044b \u0447\u0435\u0442\u044b\u0440\u0435 \u043f\u0430\u043a\u0435\u0442\u0430, \u043f\u0435\u0440\u0435\u0441\u044b\u043b\u0430\u044e\u0449\u0438\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u043e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435 | ProHoster","og:description":"\u0412 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0438 NPM \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u0430\u044f \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c \u0432 \u0447\u0435\u0442\u044b\u0440\u0451\u0445 \u043f\u0430\u043a\u0435\u0442\u0430\u0445, \u0432\u043a\u043b\u044e\u0447\u0430\u044e\u0449\u0438\u0445 preinstall-\u0441\u043a\u0440\u0438\u043f\u0442.","og:url":"https:\/\/prohoster.info\/sq\/blog\/news\/v-repozitorii-npm-vyyavleny-chetyre-paketa-peresylayushhie-dannye-o-polzovatele","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-10-05T23:43:14+00:00","article:modified_time":"2020-10-05T23:43:14+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"95989","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 10:53:27","updated":"2022-10-03 07:39:09","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/95989","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=95989"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/95989\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media\/95990"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=95989"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=95989"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=95989"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}