Empresas
Empregos
  • Sobre nós
  • Soluções
    • Publicação de vagas
      Publique sua vaga e receba candidatos qualificados em 48h.
    • Avaliações de candidatos
      Mais de 500 testes técnicos e psicológicos, mais anti-fraude.
    • Headhunting
      Busca executiva personalizada do início ao fim.
    • Folha de Pagamento + EOR
      Dispersão de folha e EOR em mais de 15 países da LATAM.
  • Preços
  • Empregos

0

217
Visualizações
Why access to node-ipc has been blocked?

While building a new pipeline on Azure DevOPS, I got issue about access blockage to node-ipc.

over 4 years ago · Santiago Trujillo
2 Respostas
Responde à pergunta

0

Newer versions have a security issue stated here. The issue is fix by adding following override in the package.json.

"overrides": { "node-ipc@>9.2.1 <10": "9.2.1", "node-ipc@>10.1.0": "10.1.0" },

over 4 years ago · Santiago Trujillo Relatório

0

Maybe try something else. Basically the dev went full bonkers and he included obfuscated malware to destroy all files with a "peace and love" message consisting of single heart unicode symbol. I know how that sounds, and yeah it deserves moron of the century award by itself. But it gets better.

He intended this "love message" for russians and belarussians only, using some geoip service to profile his victims. Considering how erratic geolocation by ip is, everyone was sitting on a ticking bomb.

Then when the community figured it out, he started to pretend that this code never existed. Then when users shown him his own obfuscated file (:D) he insisted that there was malware indeed... but he made it so "it wasn't working". When i'm writting software i'm also taking care that it won't work before deploying it so it made perfect sense...

Untill someone de-obfuscated the malware file and a guy from some NGO which monitored war crimes claimed their reports got erased with "peace message" of that idiot. So at the end our "hero" told him that it was their fault as they didn't kept backups and they may be prosecuted according to some US law, because they haven't protected their data enough. So suddenly the malware was no longer "not working" and some victims of it should be even put in jail! :D

So be careful because this package could attempt to destroy all your data in the name of love, if mass media are not currently "enthusiastic" about your race, gender or nationality. Then the maintainer will put you in jail. At least the jailing will be done only in the land of peace loving unicorns (aka his head), however the data loss could happen in real world we all live in, so that could be a problem.

over 4 years ago · Santiago Trujillo Relatório
Responde à pergunta
Encontrar trabalhos remotos

Descubra a nova forma de encontrar um emprego!

melhores empregos
Principais categorias de trabalho
Empresas
Postar vaga Preços Comercial
Jurídico
Termos e Condições Política de privacidade
© 2026 PeakU Inc. All Rights Reserved.
Andres GPT
Recomende algumas ofertas para mim
Preciso de ajuda