Cybersecurity incident
Date: 2022-03-15 00:00:00
Affected organization: Undetermined
Affected country: Russian Federation
Industry: Finance and Insurance
Event type: Disruptive
Event subtype: Data Attack
Motive: Undetermined
Actor: RIAEvangelist
Actor type: Hobbyist
Actor country: United States of America
Description: The developer behind the popular "node-ipc" NPM package released a new tampered version to condemn Russia's invasion of Ukraine. The alterations introduced by its maintainer RIAEvangelist brought about undesirable behavior by targeting users with IP addresses located either in Russia or Belarus, and wiping arbitrary file contents and replacing them with a heart emoji. In a latter release, any time the node-ipc module functionality gets called, it prints to STDOUT a message taken out of the peacenotwar module, as well as places a file on the user's Desktop directory with contents relating to the current war-time situation of Russia and Ukraine.