Supply Chain Incident
node-ipc peacenotwar protestware release
The node-ipc npm package included protestware behavior that modified files for users in certain geographies, creating downstream integrity and availability risk.
ConfidenceHigh
Evidence LevelResearcher
Attack StagePackage Publish
Source Artifact DivergenceNo
Affected Packages
Affected Releases
No structured records.
Repositories
Organizations
No structured records.
Maintainers
Threat Actors
No structured records.
Campaigns
No structured records.
Build Systems
No structured records.
Distribution Channels
- npm registry
Compromised Accounts
No structured records.
Connected Entities
- node-ipcPackage
- npm registryDistribution Channel
- peacenotwarPackage
- RIAEvangelistMaintainer
- RIAEvangelist/node-ipcRepository
References
- Peacenotwar malicious npm node-ipc package vulnerabilitySnyk · 2022-03-16