[the_ad id="12394"]
HomeNewsNPM library hacked; hackers stole user passwords

NPM library hacked; hackers stole user passwords

-

Reportedly, the highly popular npm library ‘coa’ was hijacked a few days back by injecting malicious code into it, hence, impacting React pipelines around the world.

There is a very popular library called Command-Option-Argument, which receives more than 9 million weekly downloads on npm, and is almost used by 5 million people on Github, according to the reports of bleeping computer.

The authorities were able to find out this glitch but as they were setting it out, another glitch was discovered with the component called ‘rc’. The ‘rc’ component also got hijacked soon after the ‘coa’ component. The ‘rc’ component gets almost 14 million downloads a week on average, tells bleeping computer.

According to sources, there were also some malicious codes injected to the ‘coa’ releases. A shock came for the developers globally when they notice few releases for npm’s ‘coa’ library which is a project that hasn’t been touched for years.

‘coa’ is a command-line options parser for Node.js projects. The last stable version 2.0.2 for the project was released in December 2018.

Reportedly, npm has removed the compromised components which were causing harm to the database. The components are blocked from getting published temporarily while the affected data is on the recovery stage.

Anamika
Anamika focuses on data privacy, data policy, digital policies, and puts users' privacy first. She loves exploring new tech and spends time looking around business politics and its impact on users and small businesses.

Must Read

How a planned gallery uncovered a mother lode of exemplary Slovak...

0
Before the end of last year, the Slovak Design Museum delivered a deciphered assortment of '80s text experiences from the district. The games, frequently...