What happened to Faker.js and how to secure your projects

The golden rule when installing external javascript modules is that we should prefer popular packages that are frequently updated. The Faker.js library has met all this, and tens of thousands of developers have used it to generate random data such as people's names or company names as a useful tool, during development or tests.

WTF…Can You Do about Software Supply Chain Attacks without Killing Open Source?

Detect unwanted dependencies in your software like versions of faker.js or colors.js - Codenotary

The Dark Side of Open Source // What really happened to Faker.js?

The npm faker package and the unexpected demise of open source libraries

What happened to Faker.js and how to secure your projects

The right to delete: how faker.js exposed the fragile nature of open source culture, again

The story behind colors.js and faker.js

Malicious modifications to open source projects affecting thousands - Sysdig Secure – Sysdig

How to Generate Fake Data in Node.js Using Faker.js, Engineering Education (EngEd) Program

Who's going to pay to fix open source security? (Ep. 409) - Stack Overflow

The npm faker package and the unexpected demise of open source libraries

Faking is Good: Back-end Data and API Prototyping with Faker.js and JSON-Server