NODE.JS PUSHES MALWARE #3

New node-ipc update deletes your harddrive if you have a russian or belarusian ip address. Pushed via github and NPM (node.js package manager).

They didn't troll russians though; they ended up deleting evidence of russian war crimes against ukranians and leftist NGO's are going to have them arrested for terrorism.
>this might be fake but it's lulzy either way

The real story here is most new software is actually an intricate web of dependencies with blind trust of tranny dev's.

node-ipc was controlled by ONE PERSON, with ZERO OVERSIGHT
but it get's installed a million times a week because trannies blindly trust a dependency chain

github com/RIAEvangelist/node-ipc/issues/
reddit com/r/linux/comments/tg9zk1/the_authors_of_nodeipc_have_pushed_malware_in_an/

lulz to be had in the node-ipc github

FOSSfags on suicidewatch

HOW TO PREVENT
>don't install node.js
>don't install anything using node.js (electron apps, vscode, every single meme crypto multi-wallet)
>don't install any Unity game (unity was also btfo)
>NEVER AUTO UPDATE
>install gentoo (but avoiding auto-updating gentoo would have been btfo too)
>DO NOT INSTALL FROM UNTRUSTED REPOS
this means don't install from python's PIP, nodejs's NPM (which just got btfo) or any other meme repo.
install from your distributions package manager only, and from a stable / LTS branch, these sit for months waiting for dumb shit like this to happen before they approved for stable

Attached: 1647566211411.png (1808x948, 793.1K)

Other urls found in this thread:

snippet.host/kvcb
twitter.com/AnonBabble

Then stop using porn machines to do e commerce and news.

Previous thread
github issues is still a continuous source of salt and lulz

Attached: based_on_what.jpg (668x729, 51.75K)

Since OP is a faggot here is the link to the post that has since been moved here:
snippet.host/kvcb

look at this deformed kike

Attached: file.png (620x527, 492.96K)

who cares about some madeup warcrime schtick?
This story is fake.
there are no war crimes.
fuck off and die!

it doesn't really matter, but that's why I mentioned it in the OP.
it's easily the most lulzy in the issues section because it's the most damaging and if it didn't happen it definitely could have.

it's the worst case scenario for the left outside of this getting in to a hospital's system and taking 9000 children off livesupport and murdering them on live tv

Just who in the hell ist Brian David Rollo-Smith?

Attached: 1647545674429.png (1230x1768, 264.56K)

Qubes OS would have solved this, even gentoo would have been btfo if you blindly installed / ran node.js

nobody wants to accept no gaymes though. the virtualization walls prevent apps from using GPU hardware acceleration.

Attached: 800px-Qubes_OS_Logo.svg.png (800x860, 31.26K)

Attached: 1647547882894.png (912x381, 47.46K)

god damn it, lost
imagine fucking your life up because you thought "yeah, fuck Putin" and ended up being a moron retard that only knows how to code.

What happens if I already had unity games installed prior to this?

Is there even a word for that phenotype? Looks like some sort of actual neanderthal.

>
Sorry for your shitty family and I hope your life from now on give you a well earned peace of mind, but the thing is the elites are a whole other league of vile shit, like I won't deny that its fucking disgusting what your uncle did, but it isn't on the same level as making you a legitimate fuck nugget branded with red hot iron a la NXVIM.

And lets not even get into the Hasidic households...

>vscode
Last update was for me was march 2021, am I good lads?

wtf since when is node.js not malware

Is this a felony? Could someone help his employers to know what he has done and fire the brainlet? And perhaps fucking cancel him in a context of his career?

i'm sure your fine
it's a build dependency for a lot of shit though. the software you want doesn't even need to use it directly it just needs to be compiled with something that uses it (therefore requiring you to install it).

sudo apt-get install [some random shit]
could pull in 300 packages, one of them being node-ips; and then your fucked if you don't look closely

pretty sure this nigger is going to federal prison for a long time

while I'm not concerned about my data currently I do wonder. Is this really how it works? An update gets pushed out and your computer doesn't even question a single thing about it and just executes whatever?
Or is this more of a server kind of thing and not "small user"-related?

Was talking about this with my Wife and she just raised a good point, Russians can get 15 years in prison for anti war sentiments so having those anti war txt files on their PCs is even more dangerous than the harddrive rewrites

>>don't install node.js
>>don't install anything using node.js (electron apps, vscode, every single meme crypto multi-wallet)
OK faggot. I have all of these things installed and am using them right fucking now.

>discussing politics with your wife

Attached: haram.jpg (800x450, 83.84K)

enjoy your entire digital existence hinging on the will of some butthurt tranny somewhere

well you're at the mercy of untermenschen neanderthals like pic rel

Well, microsoft could do the same and worse. But since it's not some open source shit where random retards push their code your shit will only get deleted by accident when some pajeet doesn't do the needful rather than intentionally.