What happened to Faker.js and how to secure your projects

The golden rule when installing external javascript modules is that we should prefer popular packages that are frequently updated. The Faker.js library has met all this, and tens of thousands of developers have used it to generate random data such as people's names or company names as a useful tool, during development or tests.

The right to delete: how faker.js exposed the fragile nature of open source culture, again

The npm faker package and the unexpected demise of open source libraries

WTF…Can You Do about Software Supply Chain Attacks without Killing Open Source?

How to Generate Fake Data for an Application using Faker.js

What Actually Happened to Faker.js: Open Source Contribution Lessons - DEV Community

Developer Gets Suspended After Intentionally Sabotaging GitHub and Other Open-Source Libraries

Issues · faker-js/playground · GitHub

39 Best Node.js Libraries & Frameworks: ULTIMATE LIST for 2023

Have You Heard About The Faker.js News?, by Hussein Baashen

Code-Sabotage Incident in Protest of Ukraine War Exposed Open Source Risks

JavaScript developer destroys own projects in supply chain “lesson” – Sophos News

Vue Security Best Practices 💎

Marak, creator of faker.js who recently deleted the project due to lack of funding and abuse of open source projects/developers pushed some strange Anti American update which has an infinite loop

JavaScript developer destroys own projects in supply chain “lesson” – Sophos News

The story behind colors.js and faker.js