Removal of functional code in faker.js
High severity
GitHub Reviewed
Published
Mar 22, 2022
to the GitHub Advisory Database
•
Updated Jan 11, 2023
Description
Published to the GitHub Advisory Database
Mar 22, 2022
Reviewed
Mar 22, 2022
Last updated
Jan 11, 2023
Faker.js helps users create large amounts of data for testing and development. The maintainer deliberately removed the functional code from this package. This appears to be a purposeful and successful attempt to make the package unusable. This is related to the colors.js CVE-2021-23567.
The functional code for this package was forked and can be found here.
References