CVE-2022-23812

The node-ipc package (versions 10.1.1 to 10.1.3 ) contains malicious protestware code. If executed by a user with an IP address located in Russia or Belarus , the code identifies the country via a geolocation API and proceeds to overwrite local files with a heart emoji . Starting from version 11....