The package uses https://github.com/RIAEvangelist/peacenotwar to deliver the message.

But I don't understand why/how it would wipe the PC. Unless I missed something, the code from the package does not delete anything.

> This code serves as a non-destructive example of why controlling your node modules is important. It also serves as a non-violent protest against Russia's aggression that threatens the world right now.

Nah, the author knew it's would be controversial. The first sentence is there as an excuse.