Dev corrupts NPM libs 'colors' and 'faker' breaking thousands of apps

Users of popular open-source libraries 'colors' and 'faker' were left stunned after they saw their applications, using these libraries, printing gibberish data and breaking. Some surmised if the NPM libraries had been compromised, but it turns out there's more to the story.

GitHub developer corrupts popular open source libraries, suspended

Rapid Response: Finding NPM libs 'colors' and 'faker

npm Libraries 'colors' and 'faker' Sabotaged in Protest by their

Why you should update your dependencies automatically

Pin dependency on `colors` package to version 1.4.0 · Issue #2007

GitHub developer Marak Squires corrupts open source libraries

Developer sabotages open source modules colors.js and faker.js in

Protestware on the rise: Why developers are sabotaging their own

The npm faker package and the unexpected demise of open source

RWPod Кафе 28: Alexey Vasiliev, Valentine Zavadskiy, Alex

GitHub developer corrupts popular open source libraries, suspended

Blue Sky Thinking

Open-source software and its issues – CPSC 329/602 W22

CRITICAL: react-native-codegen is using vulnerable colors.js

npm install turboencabulator • George Mandis