!!!!!!!!!!!! Please do something to warn USERS besides publishing new versions
See original GitHub issueSee https://github.com/RIAEvangelist/node-ipc/issues/233#issuecomment-1068182278 the node-ipc
is doing things far more than ever expected.
If any users are using ip in russia, all their file will be wiped entirely by ❤️, and that’s a VERY DANGEROUS BEHAVIOR. This is not just making a joke, but damaging russia people’s PC or server
I don’t think vue team has done enough job just releaasing new versions, we should at lease
-
add POPUPs in official website about that
-
deprecate all the infected vue-cli packages to add a message for that
Also, we can do:
- adding some warnings in
vue-devtools
by publishing new versions, so that users may get a chance automatically upgrade and see the warning.
@sodatea @yyx990803 Please take actions as soon as possible!❤️
Issue Analytics
- State:
- Created 2 years ago
- Reactions:90
- Comments:96 (2 by maintainers)
Top Results From Across the Web
npm notice Beginning October 4, 2021, all connections to the ...
Am I missing something ? Warning seen. npm notice Beginning October 4, 2021, all connections to the npm registry - including for package...
Read more >My app has been removed from Google Play
Once your app is removed, the published version of your app won't be available on Google Play until a compliant update is submitted....
Read more >scripts - npm Docs
Does not run during npm publish , but does run during npm ci and npm install . ... to allow users to avoid...
Read more >Uploading Changes - Gerrit Code Review
On Gerrit installations that do not support SSH authentication, the user must ... owners) who have configured Gerrit to notify them of new...
Read more >Apache Log4j Security Vulnerabilities
Apache Log4j2 versions 2.0-beta7 through 2.17.0 (excluding security fix releases 2.3.2 and 2.12.4) are vulnerable to a remote code execution ( ...
Read more >Top Related Medium Post
No results found
Top Related StackOverflow Question
No results found
Troubleshoot Live Code
Lightrun enables developers to add logs, metrics and snapshots to live code - no restarts or redeploys required.
Start FreeTop Related Reddit Thread
Top Related Hackernoon Post
No results found
Top Related Tweet
No results found
Top Related Dev.to Post
No results found
Top Related Hashnode Post
No results found
Top GitHub Comments
It’s not really possible to run that code. It poses no threat, but it does look scary for sure.
The community should fork node-ipc since the owner can no longer be trusted.