Warning to "node-ipc" users. Version 11.0.0+ contains malicious code, that targets users with IP located in Russia or Belarus, and overwrites their files with a heart emoji.

• node-ipc-dependencies-list

  4 95 2.3 Python

  List of all dependencies affected by node-ipc malicious commit

After searching through the dependents it seems like in the case of vuejs (and some others) it is only vue-cli that is impacted so if you setup vue manually or with a different cli (vite, nuxt, quasar, etc) you likely aren't affected. text only list of dependents

• The-MALWARE-Repo

  1 849 4.7 VBScript

  A repository full of malware samples.

Malware is allowed on github, and that is the way it should be. The link above is malware hosted on github that should not be removed - there are also repos like this: https://github.com/Da2dalus/The-MALWARE-Repo

• InfluxDB

  www.influxdata.com featured

  Power Real-Time Data Analytics at Scale. Get real-time insights from all types of time series data with InfluxDB. Ingest, query, and analyze billions of data points in real-time with unbounded cardinality.

  

• youtube-dl

  1,082 128,605 8.5 Python

  Command-line program to download videos from YouTube.com and other video sites

  

I don't know about this particular case but plenty of projects on github provide "the finished product" - compiled executables. e.g. https://github.com/ytdl-org/youtube-dl/releases

• node-ipc

  76 42 2.3 JavaScript

  A nodejs module for local and remote Inter Process Communication (IPC), Neural Networking, and able to facilitate machine learning. (by RIAEvangelist)

I honestly don't get your point because of all the cynicism I suppose. But if I take it bluntly.. yes they do. It's called the army as they are not regular citizens. Obviously there will be regular citizens fighting along on both sides. Don't get me wrong. I don't condemn anything that "Russia" (leaders, politicians, military, supporters, lobbyists, suppliers, etc.) is doing. But the average joe that loses data because some activist guy that happens to have a big code outreach is also a bit of a lunatic. Relevant unverified side story: https://github.com/RIAEvangelist/node-ipc/issues/308

Suggest a related project