Ethernet developer: a vulnerability in the official Solana library where any dep update could bring a Trojan into a SOL application

08/12 13:48

Ether developer Evan Van Ness shared a post from a developer who noticed a potentially critical issue in the project's official web3.js library that could harm both regular users and developers willing to build SOL-based applications. After downloading the library, the developer saw 723 dependencies in a 202MB package. When the repository was unpacked, another 310MB was created with over 17,000 files. The problem is that all repositories have an unbound version range, which means that any updates could potentially bring malware to SOL-based applications via the library. The security vulnerability of the repository is a serious issue that needs to be fixed to avoid future security issues, but given the various technical issues and recent network downtime, it is clear that the ecosystem is riddled with bugs, technical issues and other problems that prevent Solana from replacing networks such as Ether.

421Paylaş

Sorumluluk Reddi：Yukarıdaki içerik HTX'ın tutumunu temsil etmez.，HTX herhangi bir alım satım önerisinde bulunmaz.。