node-ipc
node-ipc-dependencies-list
| node-ipc | node-ipc-dependencies-list | |
|---|---|---|
| 2 | 4 | |
| 27 | 95 | |
| - | - | |
| 3.8 | 2.3 | |
| about 1 month ago | 9 months ago | |
| JavaScript | Python | |
| MIT License | MIT License |
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
node-ipc
-
PSA: RIAEvangelist appears to be attempting to pretend he was hacked
For those of you not aware, Brandon Nozaki Miller (aka RIAEvangelist) decided to protest the war in Ukrainian by launching a supply chain attack. After waiting for a while it appears he has adopted a new strategy of pretending that his account was actually hacked and someone else committed this crime. He has recently started getting active again so beware.
- Drop-in fork of `node-ipc`
node-ipc-dependencies-list
- BIG sabotage: Famous npm package deletes files to protest Ukraine war
-
Warning to "node-ipc" users. Version 11.0.0+ contains malicious code, that targets users with IP located in Russia or Belarus, and overwrites their files with a heart emoji.
After searching through the dependents it seems like in the case of vuejs (and some others) it is only vue-cli that is impacted so if you setup vue manually or with a different cli (vite, nuxt, quasar, etc) you likely aren't affected. text only list of dependents
- [X-post] The authors of node-ipc have pushed malware in an update, which wipes your disk if you happen to have Russian or Belorussian IP address. This affects some large projects like Vue CLI where it is a dependency. [r/linux | @bantg, Twitter]
-
node-ipc has malware in it. do not use it
Here’s a list for packages that use node-ipc.
What are some alternatives?
vue-cli - 🛠️ webpack-based tooling for Vue.js Development
node-ipc - A nodejs module for local and remote Inter Process Communication (IPC), Neural Networking, and able to facilitate machine learning.
peacenotwar - Attempts to determine if the computer its running on has an IP originating from Russia or Belarus. If it is then depending on the version of the malware either attempts to delete all files on the computer, or creates a text file on the computers desktop protesting the war in ukraine.
The-MALWARE-Repo - A repository full of malware samples.
create-vue - 🛠️ The recommended way to start a Vite-powered Vue project
youtube-dl - Command-line program to download videos from YouTube.com and other video sites
es5-ext - ECMAScript extensions (with respect to upcoming ECMAScript features)
node-ipc - Anti-Russian/Belarusian Protest Malware Module, because we needed more prejudice towards innocent people.
rfcs - Public change requests/proposals & ideation
gitian-builder - Build packages in a secure deterministic fashion inside a VM
Windows-Sandbox-Utilities - A public repository for useful developments surrounding Windows Sandbox
worldle