Kutanga kwemwedzi takagovana pano pablog nhau dzemugadziri akaparadza yake yakavhurika sosi chirongwa, "Marak Squires", munyori wemaraibhurari maviri anozivikanwa akavhurwa sosi, color.js uye faker.js, wakakanganisa nemaraibhurari ese ari maviri nemaune.
Mugadziri wemaraibhurari maviri aya yakaunza ongororo yefaira paGitHub in colours.js iyo inowedzera itsva American flag module, pamwe nekushandisa shanduro 6.6.6 ye faker.js, izvo zvinoparira kuparadzwa kwechiitiko chimwe chete.
Sabotaged shanduro dzinoita kuti maapplication arambe achiburitsa mavara nezviratidzo vasingazivi, kutanga nemitsara mitatu yezvinyorwa inoti "LIBERTY LIBERTY LIBERTY."
Zvinofanira kutaurwa kuti mushure mehuwori hwemaraibhurari, Microsoft yakakurumidza kumisa kupinda kwako kuGitHub uye kumisa mapurojekiti pa npm.
Mutauriri weGitHub akapa chirevo ichi kune zviito zvakatorwa nehurongwa:
"GitHub yakazvipira kune hutano nekuchengetedzeka kwenpm registry. Isu tinobvisa mapakeji ane hutsinye uye kumisa account yemushandisi zvinoenderana neNpm's Inogamuchirwa Kushandisa Policy ine chekuita nemalware sezvakarongwa muOpen Source Terms."
The company zvakare yakaburitsa inotevera chengetedzo yambiro:
"Mavara iraibhurari yekubatanidza mavara ane mavara mu node.js consoles. Pakati paNdira 7 na9, 2022, shanduro dzeruvara 1.4.1, 1.4.2, uye 1.4.44-liberty-2 dzakaburitswa dzaisanganisira kodhi yakaipa iyo yakakonzera kurambwa kwesevhisi nekuda kweiyo loop isingaperi. Software yaienderana neshanduro idzi yakasangana nemavara asina kurongeka achidhindwa kune iyo console uye isingaperi loop zvichikonzera isingaenderane sisitimu yekushandisa. Vashandisi veruvara vanovimba neaya chaiwo mavakirwo vanofanirwa kuchinjira ku1.4.0.
Kunyange izvi zvingava pachena kune vamwe (mugadziri akasundidzira chibvumirano chine hutsinye kodhi uye GitHub uye npm vakaita chinhu chakanaka chekudzivirira vashandisi vako), gakava ramuka pamusoro pekodzero dzemugadziri kuti aite izvi, zvine chekuita nekuti mangani mapurojekiti uye zvinoenderana nezvavanogona kuva nazvo.
"Njodzi inounzwa nekutsamira yakakwira ine zvidiki zvinotsamira zvinonyanya kushandiswa, nemugadziriri mumwe asina kusimbiswa, akaiswa kuburikidza nepakeji maneja senge npm, cargo, pypi kana zvakafanana. Nekudaro, kana chimwe chinhu chikatadza kudivi rino, munhu wese anoona nekukasira uye vanhu vanokumbira mari nekukurumidza. Nekudaro, hazvisi izvo zvinotsamira izvo zvinotsigira hupfumi hwedu. Zvizhinji zvezvipindwa muropa izvi zvave nheyo, kwete nekuti ivo vanogadzirisa dambudziko rakaoma, asi nekuti isu takatanga kumbundira husimbe pamusoro pezvimwe zvese. Kana tikatarisisa nhaurirano dzedu dzemari dzakatenderedza mhando idzi dzekutsamira, tinozvibvisa pachedu kubva pamapakeji akakosha. "
Chero kumiswa kunoratidzika kunge kusina musoro tichifunga izvozvo kodhi iri mumatura ndeyemusiki/muchengeti wayo. Ehe, iyo yakavhurika sosi mupfungwa yekuti iwe unogona kuforoma uye kugovera kwairi, asi zvinoreva here kuti GitHub inogona kupembedza kukunyima kodzero yekushandura kana kutoparadza yako kodhi? Pane "due process" murudzi urwu rwesarudzo?
Dzimwe nyaya dzakasimudzwa nezviitiko izvi inzira yekupa mubairo vanhu zvakanaka nekuda kwebasa ravakaita pane yakavhurika sosi software inosimbisa imwe, yakakura software inoita kuti mega-corporations iite purofiti yakakura.
Muchiitiko ichi, maraibhurari aya eJavaScript anoshandiswa neAmazon Cloud SDK, inova chikamu cheAWS.
Kunyangwe mavara.js uye faker.js achinakidzwa nerutsigiro izvo zvine chinangwa chekuona kuti nharaunda dzakavhurika dzinobhadharwa nekuda kwebasa ravanoita, pane kupatsanurwa kukuru pakati pevagadziri vakagadzira nekushandisa mapakeji ane mukurumbira semavara.js uye faker. js kugamuchira uye kukosha kwayo kumakambani anoshandisazve basa ravo mahara.
Zvisinei, Marak squires account yakavhurwa zvakare uye akanyora izvi:
"Ndakabvisa zalgo infinity error with colours.js v2.2.2 uye ndakamirira kunzwa kubva kuGithub tsigiro kuti ndiwanezve kodzero yangu yekudhinda NPM.
"Kune nhengo dzakanaka dze69th Medical Social Media Division:
“Ndinokutendai nemifungo yenyu neminyengetero.
“Ndinokuvimbisai kuti ndine utano hwakanaka mumuviri nomupfungwa. Ndiri kuvhara chitupa kubva kuReid Mental Institution, chinoratidza kunze kwemumvuri wekusahadzika kuti ini, Marak Squires, handina pfungwa dzembongoro.
"Nhengo dze69th Division of Social Network Doctors dzinogona kupa gwaro rinoratidza kuti hadzina pfungwa dzembongoro?" »
Mhoroi, zita rangu ndinonzi Jaime del Valle uye ndinoshanda muEdTech, tiri kuronga chiitiko chemahara chekutaura nezvenyaya: Yemahara Software: Inofanira kusununguka kusvika papi?
Tinoda kukukoka iwe semukurukuri, zuva rekuyedza ndiChipiri, Kubvumbi 19 na7 pm mumhando yedhijitari, ungade kutora chikamu?