Mongo SaaS is a commercial service, as such having little to do with open source. And of course it's not the first and even not the second time commercial vendo

Mongo SaaS is a commercial service, as such having little to do with open source. And of course it's not the first and even not the second time commercial vendors refuse to provide service, including for political reasons. People getting banned all the time on social networks for political reason, and AWS famously killed Parler service for the same. So it's not something new, it's just continuation of the same trend. And undoubtedly we will see more of it - if the government can close your bank account for disagreeing with it, they'd certainly be able to close your Google or AWS account. For private companies, it's even easier. And node library... well, malicious code in node libraries is also not new, though in this particular case the question whether it's malicious or righteous action may be subjective. That's a supply chain attack, and nodejs community certainly will have to figure out whether they want to stop it and if so, how. Until this happens, the node developers should be super careful with their dependencies I guess.