Dev corrupts NPM libs 'colors' and 'faker' breaking thousands of apps

Users of popular open-source libraries 'colors' and 'faker' were left stunned after they saw their applications, using these libraries, printing gibberish data and breaking. Some surmised if the NPM libraries had been compromised, but it turns out there's more to the story.

Marak, creator of faker.js who recently deleted the project due to

Protestware on the rise: Why developers are sabotaging their own

How to Protect Your App From Malicious Dependencies

Security update about npm libraries 'colors' and 'faker

Understanding Supply Chain Attack Vulnerabilities and Attack

npm - Wikipedia

Dev corrupts NPM libs 'colors' and 'faker' breaking thousands of apps

Are Your Dependencies Code Reviewed?: Measuring Code Review

Architecture Weekly #57 - 10th January 2022

CRITICAL: react-native-codegen is using vulnerable colors.js

npm Libraries 'colors' and 'faker' Sabotaged in Protest by their