---
title: "Dev corrupts NPM libs 'colors' and 'faker' breaking thousands of apps"
url: https://daily.dev/posts/dev-corrupts-npm-libs-colors-and-faker-breaking-thousands-of-apps-0xfjrwak8
source_url: https://www.bleepingcomputer.com/news/security/dev-corrupts-npm-libs-colors-and-faker-breaking-thousands-of-apps/
type: article
source: "Hacker News"
published: 2022-01-10T02:03:03.752Z
updated: 2026-03-15T05:17:09.602Z
tags: ["general-programming", "github", "open-source", "webdev"]
reading_time: 5
upvotes: 57
comments: 7
language: en
---

> ## Documentation Index
> Fetch the complete documentation index at: https://daily.dev/llms.txt
> Use this file to discover all available pages before exploring further.

# Dev corrupts NPM libs 'colors' and 'faker' breaking thousands of apps

**[Hacker News](https://daily.dev/sources/hn)** · 5 min read · 57 upvotes · 7 comments

## Summary

Users of popular open-source libraries 'colors' and 'faker' were left stunned after they saw their applications, using these libraries, printing gibberish data and breaking. The developer of these libraries intentionally introduced an infinite loop that bricked thousands of projects that depend on them. The reason behind this mischief on the developer's part appears to be retaliation against mega-corporations and commercial consumers who rely on cost-free and community-powered software.

## Full article

daily.dev links to this article rather than hosting it. Read it at the original source: <https://www.bleepingcomputer.com/news/security/dev-corrupts-npm-libs-colors-and-faker-breaking-thousands-of-apps/>

## Community discussion

Top comments from developers on daily.dev.

**@ghost** · 5 upvotes

> wow... this is insane. I've just spent the last hour-odd reading various different sources, sharing different sides of this story, and it's just downright brutal on all accounts.
>
> IMHO, none of it was handled very well at all, including the Fortune 500 tycoons that (at least appear to) take advantage of OSS, and Marak himself with the way he responded to all of it... all-in-all, this whole things is just sad, and unfortunately could even continue to affect _many_ other projects for a long time to come.
>
> there's nothing quite as inhumane as "humanity" hey... :(

**@ignusg** · 4 upvotes

> GitHub definitely crossed a line by locking Maraks account. It’s his project and he is entitled to host it on there. There’s nothing even malicious about it. I do assume however that they will unblock him (if you want to give them the benefit of doubt it might be that they thought his account was hijacked).
>
> NPM on the other hand is I think in their right to take away his repo and people are in their right to criticise him. If he does stuff like this out of spite (which this is) he hurts everyone not just big corporations. Imagine a healthcare worker injecting patients with wrong medicine to...

**@upieez** · 1 upvotes

> anyone has any thoughts on this?

**@timmba** · 0 upvotes

> WHAT REALLY HAPPENED TO AARON?

**@charlesweb** · 0 upvotes

> Github should be sanctioned for this, so that Marak can raise the money he needs to continue helping the community.👀

## Similar posts on daily.dev

- [Don’t just attend KubeCon \+ CloudNativeCon, Merge Forward your experience\!](https://daily.dev/posts/don-t-just-attend-kubecon-cloudnativecon-merge-forward-your-experience--l0rpp73x8) · CNCF · 0 upvotes · 0 comments
- [Announcing H2 2026 KCDs](https://daily.dev/posts/announcing-h2-2026-kcds-m96goajm1) · CNCF · 1 upvotes · 0 comments
- [Two months of Open Community Groups](https://daily.dev/posts/two-months-of-open-community-groups-asf52zhbs) · CNCF · 0 upvotes · 0 comments
- [CNCF Unveils Schedule for KubeCon \+ CloudNativeCon Europe 2026](https://daily.dev/posts/cncf-unveils-schedule-for-kubecon-cloudnativecon-europe-2026-ikhcoa5cb) · CNCF · 2 upvotes · 0 comments
- [CNCF Debuts KubeCon \+ CloudNativeCon Japan 2026 Schedule](https://daily.dev/posts/cncf-debuts-kubecon-cloudnativecon-japan-2026-schedule-xp5pyudub) · CNCF · 1 upvotes · 0 comments

---

Tags: [#general-programming](https://daily.dev/tags/general-programming), [#github](https://daily.dev/tags/github), [#open-source](https://daily.dev/tags/open-source), [#webdev](https://daily.dev/tags/webdev)

[View this post on daily.dev](https://daily.dev/posts/dev-corrupts-npm-libs-colors-and-faker-breaking-thousands-of-apps-0xfjrwak8)