@[email protected]M to privatelife - privacy, security, freedom [email protected] • 2 years ago

The authors of node-ipc have pushed malware in an update, which wipes your disk if you happen to have Russian or Belorussian IP address. This affects some large projects [@bantg, Twitter]

6

cross-posted to:
[email protected]

8

The authors of node-ipc have pushed malware in an update, which wipes your disk if you happen to have Russian or Belorussian IP address. This affects some large projects [@bantg, Twitter]

@[email protected]M to privatelife - privacy, security, freedom [email protected] • 2 years ago

6

cross-posted to:
[email protected]

banteg (@bantg)

🚨 The authors of node-ipc have pushed malware in an update, which wipes your disk if you happen to have Russian or Belorussian IP address. This affects some large projects like Vue CLI where it is a dependency. https://github.com/RIAEvangelist/node-ipc/issues/233

Relevant reading:

https://github.com/zlw9991/node-ipc-dependencies-list

https://web.archive.org/web/20220318095406/https://github.com/RIAEvangelist/peacenotwar/issues/45

https://security.snyk.io/vuln/SNYK-JS-NODEIPC-2426370

Chat

@[email protected]
link
fedilink
3•2 years ago
The application they were using to find IP address revoked the key, so now the developer removed this and is trying to cover up their actions.

privatelife - privacy, security, freedom [email protected]

[email protected]

You are not logged in. However you can subscribe from another Fediverse account, for example Lemmy or Mastodon. To do this, paste the following into the search field of your instance: [email protected]

This community is meant to advocate privacy, security and freedom in an concise manner, free of prejudice bias, free of politics, free of cultist thoughts.

Arguing that you don’t care about the right to privacy because you have nothing to hide is no different than saying you don’t care about free speech because you have nothing to say. - Edward Snowden

Reddit: https://old.reddit.com/r/privatelife

Matrix: https://matrix.to/#/#privatelife:matrix.org

Telegram: https://t.me/r_privatelife

READ THE RULES

Opinions are welcome, facts more so. Attack arguments, not people. Hating, baiting, trolling, flaming will be dealt with strictly.
Discuss closed source software with caution. Advocating for it strongly (cult brigading) can be treated as violation of this rule.
Editing titles of article links is strictly prohibited, unless and until the summarisation remains accurate to the context of the article or paper. Such link post will be removed without questioning.
Targeting of any country, person or nation is strictly prohibited without valid reasoning. Evidence if not presented against the specific company/corporation/individual will be treated as personal attack and/or hate speech. This will result in a warning, then ban system.
NO PERMA BANS! Ban system will work as follows:

1 day --> 3 day --> 1 week --> 2 weeks --> 3 weeks --> 1 month --> 3 months --> 6 months

Severity of the ban system will be dealt with based on degree of violation and circumstances.

NO FACT-LESS EVIDENCES, NO FALSE RHETORIC Evidence has to be credible. The onus of this lies on the claimant. The same applies on the user who questions proven evidence. Violation of this rule will be dealt with strictly.
Copycat posts serve to litter the community, increasing quantity and decreasing quality of posts. As such, posts will be removed. Repeated attempts will receive warning.

Related communities:

1 user / day
3 users / week
13 users / month
252 users / 6 months
1.41K subscribers
203 Posts
352 Comments
Modlog

mods:
@[email protected]