American NGO affected by your recklessness (node-ipc vulnerability)

Re:American NGO affected by your recklessness (node-ipc vuln... by devwastaken on Thursday March 17, 2022 @12:43PM (#30713139)

The maintainer, riaevangelist, appears to be breaking federal hacking laws by including the "peacenotwar" malware. They falsely claim it only shows a message on the users desktop, however if actually recursively overwrites the users files.

https://github.com/RIAEvangelist/node-ipc/issues/319

The maintainer has taken to banning anyone pointing this out. I don't believe this is someone with good intentions. Riaevangelist may have had their account stolen. Either way they are clearly operating in support of Russia under a false flag, an increasingly common and complex issue.

Given the supposed criminal nature of these acts GitHub and other serves must step in to remove the offending commits, releases, and maintainers. Allow someone else to fork it.

[ Parent | on HN ]

Re:American NGO affected by your recklessness (node-ipc vuln... by unmole on Thursday March 17, 2022 @01:54PM (#30714000)

> Either way they are clearly operating in support of Russia under a false flag

I don't see how this is clear at all. What is the evidence that this is a false flag?

There were plenty of comments on HN that were supportive of locking Russian citizens out of their accounts and disabling their domain names. I don't find it hard to believe that someone went a step further.

[ Parent | on HN ]

Re:American NGO affected by your recklessness (node-ipc vuln... by thatguy0900 on Thursday March 17, 2022 @03:37PM (#30715061)

There's people advocating we attack anti air missiles on Russian soil to implement a no fly zone. Why is overwriting hard drives extreme enough that it has to be a false flag attack

[ Parent | on HN ]

Re:American NGO affected by your recklessness (node-ipc vuln... by makerofspoons on Thursday March 17, 2022 @12:48PM (#30713207)

Thank you for this breakdown. It wasn't clear to me at first what was going on from OP's link.

[ Parent | on HN ]

Re:American NGO affected by your recklessness (node-ipc vuln... by aw9f70gae on Thursday March 17, 2022 @01:14PM (#30713501)

Sorry about the bad title. First time submitting to HN, will be more verbose next time

[ Parent | on HN ]

Re:American NGO affected by your recklessness (node-ipc vuln... by makerofspoons on Thursday March 17, 2022 @01:21PM (#30713582)

Your title is fine! I just didn't know the context of what was going on with the project and its dependencies.

[ Parent | on HN ]