Recent searches
Search options
Administered by:
Sabotage: Code added to popular NPM package wiped files in Russia and Belarus
Two weeks ago, the node.ipc author pushed a new version of the library that sabotaged computers in Russia & Belarus. The new release added a function that checked the IP address of developers who used the node.ipc in their own projects. When an IP address geolocated to either Russia or Belarus, the new version wiped files from the machine and replaced them with a heart emoji.
Ars TechnicaSabotage: Code added to popular NPM package wiped files in Russia and BelarusWhen code with millions of downloads nukes user files, bad things can happen.