Dev corrupts NPM libs 'colors' and 'faker' breaking thousands of apps

Users of popular open-source libraries 'colors' and 'faker' were left stunned after they saw their applications, using these libraries, printing gibberish data and breaking. Some surmised if the NPM libraries had been compromised, but it turns out there's more to the story.

Malicious NPM Packages Were Found to Exfiltrate Sensitive Data

GitHub developer corrupts popular open source libraries, suspended

Open-source developer corrupted his own popular libraries

Rapid Response: Finding NPM libs 'colors' and 'faker

Open source maintainer pulls the plug on npm packages colors and

Open source developer corrupts widely-used libraries, affecting

Dev corrupts NPM libs 'colors' and 'faker' breaking thousands of apps

Jonathan Tinajero en LinkedIn: Dev corrupts NPM libs 'colors' and

Protestware on the rise: Why developers are sabotaging their own

security – keep moving

Security Journey's hi/5