AI Summary

Hackers hijacked the maintainer account of the popular npm package node‑ipc by registering its expired domain name. They then published three trojanized releases—9.1.6, 9.2.3, and 12.0.1—each embedding an 80 KB obfuscated credential‑stealing payload in the node‑ipc.cjs file. The package, used by 424 projects and downloaded nearly 700 k times weekly, had previously been compromised in March 2022 when its creator added malicious code to target systems with Russian or Belarusian IP addresses. The new malicious versions replace legitimate code, enabling attackers to harvest credentials from any project that installs them.

AI summaries can be wrong sometimes—always verify important details using the source article.