Dev corrupts NPM libs 'colors' and 'faker' breaking thousands of apps

Users of popular open-source libraries 'colors' and 'faker' were left stunned after they saw their applications, using these libraries, printing gibberish data and breaking. Some surmised if the NPM libraries had been compromised, but it turns out there's more to the story.

Dev corrupts NPM libs 'colors' and 'faker' breaking thousands of apps

BleepingComputer's most popular cybersecurity stories of 2022

How to Protect Your App From Malicious Dependencies

Open source maintainer pulls the plug on npm packages colors and

Marak, the guy behind the recent breaking of faker.js, colors.js

Open Source Developer Corrupts Popular Libraries Impacting Large

Open source developer corrupts widely-used libraries, affecting

Security Journey's hi/5

javascript - Why is my Firebase console going insane after

The NPM Libraries 'Colors' and 'Faker' Corrupted

Tobie Langel (@tobie) / X

GitHub developer Marak Squires corrupts open source libraries

Marak, creator of faker.js who recently deleted the project due to

JupiterOne

colors.js LIBERTY LIBERTY LIBERTY crashing · Issue #148