Omunye wabathuthukisi bamaphakheji e-JavaScript uzame ukudala nokubeka endaweni ye-NPM iphakheji "yonke into", ehlanganisa wonke amaphakheji akhona endaweni yokugcina nokuncika. Ukuze usebenzise lesi sici, iphakheji "yonke" inokuncika okuqondile namaphakheji amahlanu "@everything-registry/chunk-N", nawo ancike kumaphakheji "sub-chunk-N" angaphezu kuka-3000, ngalinye libophezela kuwo. 800 amaphakheji akhona endaweni yokugcina.
Ukubeka "konke" ku-NPM kube nemiphumela emibili ethokozisayo. Okokuqala, iphakheji "yonke" isiphenduke uhlobo lwethuluzi lokuhlasela kwe-DoS, njengoba umzamo wokulifaka uholela ekulandeni izigidi zamaphakheji aphethwe ku-NPM futhi kuqede isikhala sediski esitholakalayo noma ukumisa ukwenziwa kwezinqubo zokwakha. Ngokwezibalo ze-NPM, iphakheji yadawuniloda izikhathi ezingaba ngu-250, kodwa akekho ozihluphayo ngokuyengeza njengokuncika kwelinye iphakheji ngemuva kokuthi i-akhawunti kanjiniyela igetshengwa ukuze kwenziwe ukucekelwa phansi. Ukwengeza, ezinye izinsiza namathuluzi aqapha futhi ahlola amaphakheji amasha aphethwe yi-NPM avezwe ngokungazi ukuthi ahlaselwe.
Okwesibili, ukushicilela iphakheji "yayo yonke into" kuvimbe ngempumelelo ikhono lokususa noma yimaphi amaphakheji ku-NPM agcine esohlwini lwayo lokuncika. Iphakheji evela ku-NPM ingasuswa ngumlobi kuphela uma ingakasetshenziswa kakade ekuncikeni kwamanye amaphakheji, kodwa ngemva kokushicilelwa "konke" ukuncika kuvele ukumboza wonke amaphakheji endaweni yokugcina. Kuyaphawuleka ukuthi ukususwa kwephakheji "yonke" ngokwayo kwakuvinjelwe, kusukela eminyakeni engu-9 edlule iphakheji yokuhlola "konke-kokunye" yathunyelwa endaweni yokugcina, eyayihlanganisa intambo "yonke into" ohlwini lokuncika. Ngakho-ke, ngemva kokushicilelwa, iphakheji "yonke" igcine incike kwelinye iphakheji.
Source: opennet.ru