-
node-ipc
A nodejs module for local and remote Inter Process Communication (IPC), Neural Networking, and able to facilitate machine learning. (by RIAEvangelist)
-
peacenotwar
Discontinued Attempts to determine if the computer its running on has an IP originating from Russia or Belarus. If it is then depending on the version of the malware either attempts to delete all files on the computer, or creates a text file on the computers desktop protesting the war in ukraine.
-
SurveyJS
Open-Source JSON Form Builder to Create Dynamic Forms Right in Your App. With SurveyJS form UI libraries, you can build and style forms in a fully-integrated drag & drop form builder, render them in your JS app, and store form submission data in any backend, inc. PHP, ASP.NET Core, and Node.js.
Honestly, it's a bit hard to reconstruct after the fact, but from what I can tell, Miller / RIAEvangelist both added the "peacenotwar" module to the dependencies for the widely used node-ipc module, which would automatically create a text file containing a poem(?) on the users desktop if they seemed to be from Russia or Belarus (not itself destructive, but arguably maliciour behaviour and not an ok thing for a dev with this kind of responsebility to do); and pushed a commit that added this to the repo, deobfuscated here, which basically:
Links to drama: https://github.com/RIAEvangelist/peacenotwar/issues, https://github.com/RIAEvangelist/node-ipc/issues