3 ms·
Careful: Faker-JS NPM package apparently taken over by spam
It looks like the faker-js github account has been taken over and a new fake version has been published: https://www.npmjs.com/package/faker
This is a popular project with >1.7M weekly downloads.
Please be warned and make sure you have pinned to an older version of the package.
- detaro 5y agocf. https://news.ycombinator.com/item?id=29812030 https://news.ycombinator.com/item?id=29812030 The author had already said over a year ago he wouldn't work on it anymore, could equally be him just wiping it now.
- 11235813213455 5y agoI just reported it to Github, there's a shady 6.6.6 version indeed
- gitgud 5y agoSeems political, the current package has a single sentence in the README: "What really happened with Aaron Swartz?" Previous versions are immutable on npm, however a minor or patch version on an older release would break a lot of things... [1] https://www.npmjs.com/package/faker https://www.npmjs.com/package/faker
- ivegotafeeling 5y ago
- deleted 5y ago[deleted]
- cohey 5y ago