Dev corrupts NPM libs 'colors' and 'faker' breaking thousands of apps

Users of popular open-source libraries 'colors' and 'faker' were left stunned after they saw their applications, using these libraries, printing gibberish data and breaking. Some surmised if the NPM libraries had been compromised, but it turns out there's more to the story.

Blog

The Chaos of Maintaining Software Dependencies and How to Tame

JupiterOne

Security update about npm libraries 'colors' and 'faker

Security Journey's hi/5

Open-source developer corrupted his own popular libraries

Open Source Developer Sabotages npm Packages 'Colors,' 'Faker' - FOSSA

GitHub developer corrupts popular open source libraries, suspended

How to Protect Your App From Malicious Dependencies

Rapid Response: Finding NPM libs 'colors' and 'faker

📦 Top alternatives for colors and faker - DEV Community

Developer in a digital crosshair, 2022 edition - Oh My H@ck!

npm - Recent News & Activity

How a Rogue Developer Ruined Millions of Software (happened this

The npm faker package and the unexpected demise of open source