NPM package deletes all files when detects Russian IP

FYI: It was nothing political, he got 18 months for running over two people on his motorbike and killing one.

I would imagine web developers over there, being more educated, technical, and exposed to the West, would be the ones less likely to support the war.

Instead of deleting their files, why not provide news and information that being blocked? This could have been an information bridge that would be hard to censor.

Now he's just degraded trust in open-source projects for everyone and ruined his reputation as a responsible maintainer. If you're willing to make your project overtly malicious to random users for political reasons, you might also be the type to rage quit and turn your project malicious for personal reasons and community politics.