NPM package deletes all files when detects Russian IP

by nopurpose on 3/16/2022, 6:18 PM with 9 comments
  • by Tade0 on 3/17/2022, 11:04 AM

    Friendly reminder that the author and main contributor of the most popular JS polyfill library - core-js - is Russian:

    https://github.com/zloirock

    Last time he became available (doing time in a penal colony) a fairly large crisis ensued.

  • by rdtwo on 3/16/2022, 7:09 PM

    Seems like a recipe for f-up and lawsuits

  • by jcadam on 3/18/2022, 11:06 PM

    Javascript coders acting like children again...

  • by throwawaybutwhy on 3/16/2022, 7:07 PM

    TL;DR - Brandon Nozaki Miller (Director of Front End Technology and Javascript Engineering @ Ocra) committed obfuscated code in the node-ipc package that runs geolocation and with probability 0.25 erases files at client computers if they have Russian or Byeeelorussian IPs.

    Quite funny.