More detailed write-up and summary of events that I put up here: https://snyk.io/blog/peacenotwar-malicious-npm-node-ipc-pack...