See how a Developer broke Node, Babel & thousands of projects in 11 lines of JavaScript!
Many programmers were faced with broken builds and failed installations on Tuesday after someone <<took down the JavaScript “Jenga” tower.>>
https://www.secnews.gr/102304/ethihak-live-hacking-contest-teleytaia-dekada/btn-large” variation=”btn-success”]EthiHak Live Hacking Contest: ENTRY CLOSES! Catch the last 10 today!!!
A few hours ago, Azer Koçulu had removed more than 250 of his modules from NPM, which is a popular package manager used by JavaScript projects.
Koçulu made this move because, as it was said, one of his modules was called Kik, and it was this that caught the attention of lawyers representing the instant-messaging app of the same name.
According to Koçulu, Kik had warned him to change the module name, he refused, so the lawyers approached NPM admins claiming “brand theft.” When NPM took Kik away from the developer, he got angry, and decided to withdraw all his NPM-managed modules.
“This situation made me realize that NPM is a private place where companies have more power than individuals, and I am involved in open source to give power to the people,” Koçulu said on his blog.
Unfortunately one of these dependencies was left -pad. The code is shown below. The left part of the strings now displays zeros and spaces. And thousands of projects including Node and Babel relied on it….
https://www.secnews.gr/102390/wifi-slax/See also: WiFi Slax: A Linux Made for Wireless Hacking
https://www.secnews.gr/102234/olh-h-python-language-se-mia-eikona/See also: The entire Python Language in a single image… see it!
