Dev corrupts NPM libs 'colors' and 'faker' breaking thousands of apps

Users of popular open-source libraries 'colors' and 'faker' were left stunned after they saw their applications, using these libraries, printing gibberish data and breaking. Some surmised if the NPM libraries had been compromised, but it turns out there's more to the story.

Developer sabotages open source modules colors.js and faker.js in

GitHub developer corrupts popular open source libraries, suspended

January 2022 – keep moving

Marak, the guy behind the recent breaking of faker.js, colors.js

Malicious NPM Packages Were Found to Exfiltrate Sensitive Data

Open source maintainer pulls the plug on npm packages colors and

Are Your Dependencies Code Reviewed?: Measuring Code Review

Dev corrupts NPM libs 'colors' and 'faker' breaking thousands of apps

Randal Vance Cunanan posted on LinkedIn

Understanding Supply Chain Attack Vulnerabilities and Attack

npm Libraries 'colors' and 'faker' Sabotaged in Protest by their