NPM package deletes users’ files to protest Ukraine war

>A simplified copy of the code provided by researchers shows that for users based in Russia or Belarus, the code will rewrite the contents of all files present on a system with a heart emoji—effectively deleting all data on a system.

>Additionally, because 'node-ipc' versions 9.2.2, 11.0.0, and those greater than 11.0.0 bundle the peacenotwar module within themselves, affected users saw 'WITH-LOVE-FROM-AMERICA.txt' files popping up on their Desktop with "peace" messages:

Ongoing discussion: https://news.ycombinator.com/item?id=30717676