Node-ipc developers add malware which wipes Russian IP's
npmjs.com
npmjs.com
TURN OFF AUTO UPDATES FOR DEPENDENCIES. One good thing is that this bad actor will just bring more light to better practices for dependency management.
https://www.flyingpenguin.com/?p=38727
Edit: you can read his responses here https://github.com/RIAEvangelist/node-ipc/issues/233
Looks like normal advertising to me.
Seriously, stop killing Ukrainian infants https://m.youtube.com/watch?v=6YF0qfAj8IY and maybe civilized societies around the planet will stop leaving you alone.
The ONLY proven way to deal with fanatics (that use suicide as a weapon) is with “shock-and-awe” (as best demonstrated against “The Empire of the Sun” in Nagasaki and Hiroshima). When infants are killed like that, it’s not “to bring democracy,” but to prevent attacks on all post-Roman civilization, democratic or not.
But such “shock-and-awe” has opposite effect on civilized people. Patrick Henry said “Give me Liberty, or give me death” and Benjamin Franklin said, “Those who would give up essential Liberty, to purchase a little temporary Safety, deserve neither Liberty nor Safety.” Where Putin went wrong is he gave into a supernatural belief that because Russia is a name on an ancient empire of people and it is a name of his country in 2022, he is obligated to recreate the empire. Russian people in 2022 will have to give their lives until a bullet is in his brain, or they will be cutoff totally from the rest of the World. It is also a necessary demonstration for China and DPRK, so there will be no compromise or payment of nuclear blackmail.
Edit: Apparently the malware isn't working: https://github.com/RIAEvangelist/node-ipc/issues/273
And then there's the licence incompatibility: https://github.com/RIAEvangelist/node-ipc/issues/260
module in question: https://github.com/RIAEvangelist/peacenotwar
news article for news people https://securityboulevard.com/2022/03/supply-chain-attack-no...
deeper dive into the code: https://github.com/RIAEvangelist/node-ipc/issues/233
@dang plz don't remove, think I am the first to post about this
If you got hit using vue.js, try nobuild style app making its awesome! I've been using riot.js with zero build tools for two years now, and never looked back, there is no easier way to build apps.
Don't look back! build back better!