Snyk Blog company blog
NPM package compromised by author: erases files on RU / BY computers on install
Vue.js users using the dependency “node-ipc” are experiencing a supply chain attack protesting the invasion of Ukraine, from a package named “peacenotwar”.
- Points
- 312
- HN comments
- 164
- Submissions
- 1
- Cited by
- 6 commenters
Security & PrivacyOpen Source2022
On Hacker News
| Submitted | Title on HN | Points | Comments |
|---|---|---|---|
| Mar 16, 2022 | NPM package compromised by author: erases files on RU / BY computers on install by asn007 | 312 | 164 |
Cited in comments
Linked from 8 Hacker News comments by 6 different people, from Mar 2022 to Mar 2025.
Most recent:
