This week, the developer of the popular npm package 'node-ipc' released sabotaged versions of the library in protest of the ongoing Russo-Ukrainian War. The 'node-ipc' package, which gets downloaded over a million times weekly, began deleting files on developer's machines, in addition to creating new text files with "peace" messages.

Lmao

Hate the government yadda yah

  • AlyxMS [he/him]
    ·
    3 years ago

    I'm not going to update any software or module to a version less than a month old now.

    I can totally see some dev deciding all computer in China is a valid target.

    Fuck this shit. Also, deleting Notepad++. The dev is had a history of adding "Save Uyghur", "Free Tibet" and "Stand with Hong Kong" to be automatically typed out with each update, and updates are named with stuff like "Tiananmen Square Massacre".

    I didn't really care about that coz lib like being libs. Now I see it's only one step away from doing something like this.

    I use VSCode far more often anyway. Only thing I would be missing is the "search word in multiple files" function. Wonder if there's a plugin for VSCode for that.