CVE-2022-23812

The CVE-2022-23812 vulnerability affects the node-ipc package (versions 10.1.1 and 10.1.2). Embedded malicious code is triggered based on geolocation (Russia/Belarus) and overwrites user files with a heart emoji; the maintainer removed this code in version 10.1.3. Starting with 11.0.0, node-ipc i...