Open source developer corrupts own libraries
Faker.js and color.js started generating gibberish data after a developer update
Stay updated with breaking news from Amazon Cloud Development Kit. Get real-time updates on events, politics, business, and more. Visit us for reliable news and exclusive interviews.
Faker.js and color.js started generating gibberish data after a developer update
Users of popular open-source libraries 'colors' and 'faker' were left stunned after they saw their applications, using these libraries, printing gibberish data and breaking. Some surmised if the NPM libraries had been compromised, but it turns out there's more to the story.
Open source developer Marak Squires appears to have intentionally pushed corrupt updates to two of his libraries on npm and GitHub. Since these libraries are so widely-used a number of projects were brought down as a result.