Conversation

Sabotage: Code added to popular NPM package wiped files in Russia and Belarus

Two weeks ago, the node.ipc author pushed a new version of the library that sabotaged computers in Russia & Belarus. The new release added a function that checked the IP address of developers who used the node.ipc in their own projects. When an IP address geolocated to either Russia or Belarus, the new version wiped files from the machine and replaced them with a heart emoji.