Empresas
Empleos
  • Sobre nosotros
  • Soluciones
    • Publicación de vacantes
      Publica tu vacante y recibe candidatos calificados en 48h.
    • Evaluación de candidatos
      500+ pruebas técnicas y psicológicas, más anti-fraude.
    • Headhunting
      Búsqueda ejecutiva a la medida de principio a fin.
    • Nómina + EOR
      Dispersión de nómina y EOR en más de 15 países de LATAM.
  • Precios
  • Empleos

0

218
Vistas
Why access to node-ipc has been blocked?

While building a new pipeline on Azure DevOPS, I got issue about access blockage to node-ipc.

over 4 years ago · Santiago Trujillo
2 Respuestas
Responde la pregunta

0

Newer versions have a security issue stated here. The issue is fix by adding following override in the package.json.

"overrides": { "node-ipc@>9.2.1 <10": "9.2.1", "node-ipc@>10.1.0": "10.1.0" },

over 4 years ago · Santiago Trujillo Denunciar

0

Maybe try something else. Basically the dev went full bonkers and he included obfuscated malware to destroy all files with a "peace and love" message consisting of single heart unicode symbol. I know how that sounds, and yeah it deserves moron of the century award by itself. But it gets better.

He intended this "love message" for russians and belarussians only, using some geoip service to profile his victims. Considering how erratic geolocation by ip is, everyone was sitting on a ticking bomb.

Then when the community figured it out, he started to pretend that this code never existed. Then when users shown him his own obfuscated file (:D) he insisted that there was malware indeed... but he made it so "it wasn't working". When i'm writting software i'm also taking care that it won't work before deploying it so it made perfect sense...

Untill someone de-obfuscated the malware file and a guy from some NGO which monitored war crimes claimed their reports got erased with "peace message" of that idiot. So at the end our "hero" told him that it was their fault as they didn't kept backups and they may be prosecuted according to some US law, because they haven't protected their data enough. So suddenly the malware was no longer "not working" and some victims of it should be even put in jail! :D

So be careful because this package could attempt to destroy all your data in the name of love, if mass media are not currently "enthusiastic" about your race, gender or nationality. Then the maintainer will put you in jail. At least the jailing will be done only in the land of peace loving unicorns (aka his head), however the data loss could happen in real world we all live in, so that could be a problem.

over 4 years ago · Santiago Trujillo Denunciar
Responde la pregunta
Encuentra empleos remotos

¡Descubre la nueva forma de encontrar empleo!

Top de empleos
Top categorías de empleo
Empresas
Publicar vacante Precios Comercial
Legal
Términos y condiciones Política de privacidad
© 2026 PeakU Inc. All Rights Reserved.
Andres GPT
Recomiéndame algunas ofertas
Necesito ayuda