**Alex Gleason** @alex@gleasonator.com · Mar 17, 2022, 03:24

**Alex Gleason** @alex@gleasonator.com · Mar 17, 2022, 03:24

Alex Gleason @alex@gleasonator.com

Mar 17, 2022, 03:24

node-ipc, an npm package with 892,000 weekly downloads, added a piece of code that pings an API to check if your IP address is in Russia or Belarus. If so, it then replaces files in the current directory with the heart emoji, then traverses up through the parent directories.

https://github.com/RIAEvangelist/node-ipc/issues/233

**anime graf mays 🛰️🪐** @graf@poa.st · Mar 17, 2022, 13:45

**anime graf mays 🛰️🪐** @graf@poa.st · Mar 17, 2022, 13:45

Mar 17, 2022, 13:45

anime graf mays 🛰️🪐 @graf@poa.st

@alex this guy is force pushing commits now btw

github.com/RIAEvangelist/node-ipc/issues/299

a506c9f003ba709d6691d48bbb71f264fb74ddcf7a5a33093e999be2e89a6fcb.png

**matrix07012** @matrix@gameliberty.club · 2022-03-17T13:49:31Z

matrix07012 @matrix@gameliberty.club

@graf @alex Wait, with the malicious code or just cringe code?

Mar 17, 2022, 13:49 · · Web · · ·

**anime graf mays 🛰️🪐** @graf@poa.st · Mar 17, 2022, 13:50

**anime graf mays 🛰️🪐** @graf@poa.st · Mar 17, 2022, 13:50

Mar 17, 2022, 13:50

anime graf mays 🛰️🪐 @graf@poa.st

@matrix @matrix @alex no he's trying to wipe any trace of what he's done, all of the commits after december 10th are gone

github.com/RIAEvangelist/node-ipc/commits/master