Public
- Public
- Network
- Groups
- Popular
- People

Conversation

Notices

Eugen (gargron@mastodon.social)'s status on Monday, 10-Jan-2022 21:58:37 JST Eugen
in reply to
- fcr
@fcr If you don't want to support fortune 500s with your free work, don't publish your work under the MIT license
I can't fathom people in this thread are siding with him. This is a breach of trust in the open source world. The updates were purposefully malicious.
He was allegedly also making a bomb and set his house on fire:
https://abc7ny.com/suspicious-package-queens-astoria-fire/6425363/

In conversation Monday, 10-Jan-2022 21:58:37 JST from mastodon.social permalink
- fcr (fcr@post.lurk.org)'s status on Monday, 10-Jan-2022 21:58:46 JST fcr
  
  FLOSS developer intentionally corrupts his libraries and has multiple depending applications print out garbage, stating that "I am no longer going to support Fortune 500s [...] with my free work."
  https://www.bleepingcomputer.com/news/security/dev-corrupts-npm-libs-colors-and-faker-breaking-thousands-of-apps/
  #FLOSS #labor
  In conversation Monday, 10-Jan-2022 21:58:46 JST permalink
  Attachments
  1. Domain not in remote thumbnail source whitelist: www.bleepstatic.com
    
    Dev corrupts NPM libs 'colors' and 'faker' breaking thousands of apps
    
    from @BleepinComputer
    
    Users of popular open-source libraries 'colors' and 'faker' were left stunned after they saw their applications, using these libraries, printing gibberish data and breaking. Some surmised if the NPM libraries had been compromised, but it turns out there's more to the story.
  とねぢ＠Minoh-don（ash） repeated this.

Public

Conversation

Notices

Feeds