4 ms·
node-ipc is a recent example from the Node ecosystem. The author released an update with some code that made a request to a geolocation webservice to decide whe
by do_not_redeem 2y ago
node-ipc is a recent example from the Node ecosystem. The author released an update with some code that made a request to a geolocation webservice to decide whether to wipe the local filesystem.
- mubou 2y agoYeesh. Found an article for anyone interested: https://snyk.io/blog/peacenotwar-malicious-npm-node-ipc-package-vulnerability/ https://snyk.io/blog/peacenotwar-malicious-npm-node-ipc-pack... I like this comment from u/mailto_devnull (https://www.reddit.com/r/node/comments/tg451e/do_not_use_nodeipc_lib/ https://www.reddit.com/r/node/comments/tg451e/do_not_use_nod...): Where do I stand on the war? I stand with Ukraine. Where do I stand on software supply chain issues? I stand with not fucking around with the software supply chain.