This week, the developer of the popular npm package 'node-ipc' released sabotaged versions of the library in protest of the ongoing Russo-Ukrainian War. The 'node-ipc' package, which gets downloaded over a million times weekly, began deleting files on developer's machines, in addition to creating new text files with "peace" messages.
If some rando in China did this exact thing to protest the US role in the ongoing Yemeni genocide, the headline would read "Chinese Nationals commit cyber-attack".