GitHub
Bleeping Computer
Marak Squires
LIBERTY
Readme
Creative Commons
RSS
JSTOR
Amazon
Squires’
Heartbleed
Verge Deals
Aaron Swartz
Squires
” Squires
American
No matching tags
No matching tags
No matching tags
No matching tags
While it looks like color.js has been updated to a working version, faker.js still appears to be affected, but the issue can be worked around by downgrading to a previous version (5.5.3).Bleeping Computer found that the developer of these two libraries, Marak Squires, introduced a malignant commit (a file revision on GitHub) to colors.js that adds “a new American flag module,” as well as rolled out version 6.6.6 of faker.js, triggering the same destructive turn of events. For context, faker.js generates fake data for demos, color.js adds colors to javascript consoles.In response to the problem, Squires posted an update on GitHub to address the “zalgo issue,” which refers to the glitchy text that the corrupt files produce.
As said here by Emma Roth