node-ipc, an npm package with 892,000 weekly downloads, added a piece of code that pings an API to check if your IP address is in Russia or Belarus. If so, it then replaces files in the current directory with the heart emoji, then traverses up through the parent directories.
@matrix @matrix @alex no he's trying to wipe any trace of what he's done, all of the commits after december 10th are gone
github.com/RIAEvangelist/node-ipc/commits/master
github.com/RIAEvangelist/node-ipc/commits/master
