Open source maintainer pulls the plug on npm packages colors and faker, now what? | SnykOn January 8, 2022, the open source maintainer of the wildly popular npm package colors, published [email protected] and [email protected] in which they intentionally introduced an offending commit that adds an infinite loop to the source code. The infinite loop is triggered and executed immediately upon initialization of the package’s source code, and would result in a Denial of Service (DoS) to
初めてのOSS初めてのNode.js Contribute #tng25
