Dev corrupts NPM libs 'colors' and 'faker' breaking thousands of apps

Users of popular open-source libraries 'colors' and 'faker' were left stunned after they saw their applications, using these libraries, printing gibberish data and breaking. Some surmised if the NPM libraries had been compromised, but it turns out there's more to the story.

Understanding Supply Chain Attack Vulnerabilities and Attack

Open source maintainer pulls the plug on npm packages colors and

Open-source software and its issues – CPSC 329/602 W22

How to Protect Your App From Malicious Dependencies

JFrog Helps Clean up Bad npm JavaScript with 3 New Tools - The New

The NPM Libraries 'Colors' and 'Faker' Corrupted

CRITICAL: react-native-codegen is using vulnerable colors.js

Jonathan Tinajero en LinkedIn: Dev corrupts NPM libs 'colors' and

The npm faker package and the unexpected demise of open source