Faker organization has a serious OPSEC risk problem - Marak 2.0?

[Saru271]

It has become known that one of Faker's core contributor is involved in a serious hacking and network breach. This comes straight from the source of the company Apply Digital which was hacked https://github.com/applydigital

This needs to be openly addressed given how widespread Faker is and the risk vulnerabilities being introduced by core itself.

[Shinigami92]

https://fakerjs.dev/about/announcements/2022-01-14.html

[Saru271]

I do not understand your link. This does not relate to @Marak unless he is wearing a mask for several years and created a false persona to keep contributing.

I speak of a different core member from present day.

[Saru271]

I have looked again at I am reasonably sure that Marak has nothing to do with this. Marak is very conspicuous when he wishes to make a statement. Vice Admiral would be a more believable candidate for Marak #3504

I am fairly certain and convinced from what I have read and been told. There are 245,605 repositories that depends on Faker and I think this warrants transparency and frankness.

[Shinigami92]

Hi there,

Thank you for raising your concerns.

We take any allegation of misconduct seriously. At the same time, we want to be clear that the Faker project is not affiliated with, nor connected to, any of the individuals, organizations, domains, or legal matters referenced in your message.

The team member mentioned is a contributor who has been helping with locale support, documentation improvements, and unit tests. All contributions to Faker go through our standard review process. Changes are reviewed by maintainers before being merged, and releases are handled exclusively by the core maintainers.

At this time, we are not aware of any evidence indicating inappropriate activity within the scope of this project. If you have verifiable information that is directly relevant to Faker’s codebase, infrastructure, or community safety, please share it with the maintainers through the appropriate channels so it can be reviewed responsibly.

We ask everyone to keep discussions respectful and focused on the project itself. Unverified allegations about individuals are not something we can adjudicate in a public issue thread.

Thank you for your understanding.

• The Faker Maintainers