GSD-2022-1000008
- Source
- https://data.gsd.id/GSD-2022-1000008
- Import Source
- https://github.com/cloudsecurityalliance/gsd-database/blob/main/2022/1000xxx/GSD-2022-1000008.json
- JSON Data
- https://api.osv.dev/v1/vulns/GSD-2022-1000008
- Published
- 2022-01-09T02:46:05.199689Z
- Modified
- 2022-01-09T11:37:01.199689Z
- Summary
- faker.js 6.6.6 is broken and the developer has wiped the original GitHub repo
- Details
-
faker.js had it's version updated to 6.6.6 in NPM (which reports it as having 2,571 dependent packages that rely upon it) and the GitHub repo has been wiped of content. This appears to have been done intentionally as the repo only has a single commit (so it was likjely deleted, recreated and a single commit with "endgame" added). It appears that both GitHub and NPM have locked out the original developer accountbut that the faker.js package is still broken. Please note that this issue is directly related to GSD-2022-1000007 and appears to be part of the same incident. A fork of the repo with the original code appears to now be available at https://github.com/faker-js/faker
- References
-
Affected packages
npm / faker.js
Package
- Name
- faker.js
- View open source insights on deps.dev
- Purl
- pkg:npm/faker.js