What happened to Faker.js and how to secure your projects

The golden rule when installing external javascript modules is that we should prefer popular packages that are frequently updated. The Faker.js library has met all this, and tens of thousands of developers have used it to generate random data such as people's names or company names as a useful tool, during development or tests.

JavaScript developer destroys own projects in supply chain “lesson” – Sophos News

Open Source — A Horror Story. What happened to Faker.js and its…, by Alex Streza

JFrog Helps Clean up Bad npm JavaScript with 3 New Tools - The New Stack

When open-source developers go bad

Faker' npm Library Gets New Home After Dev Throws in the Towel

Faking is Good: Back-end Data and API Prototyping with Faker.js and JSON-Server

Developer Gets Suspended After Intentionally Damaging GitHub

Who's going to pay to fix open source security? (Ep. 409) - Stack Overflow

New Protestware Found Lurking in Highly Popular NPM Package

How To Use Faker.js: A Fake Data Generating JavaScript Library

Web API - Faker.js - Zone of Development

Marak, creator of faker.js who recently deleted the project due to lack of funding and abuse of open source projects/developers pushed some strange Anti American update which has an infinite loop

javascript - What happened with faker.js - Stack Overflow

What Actually Happened to Faker.js: Open Source Contribution Lessons - DEV Community