node-ipc adds remote interprocess communication

As a dependency, node-ipc is automatically downloaded and incorporated into other libraries

Dependency for Vue.js CLI

node-ipc author Brandon Nozaki Miller base-64-encoded the changes to obfuscate the code

node-ipc author maintains 40 other libraries,

Final Thoughts:

You need a Disaster Recovery System

“Hackers” are assholes. Understand collateral damage before “hacking”

Silo/ Segment your systems so that compromising a single component won’t compromise all of your systems. Use virtualization.

Know what you’re installing to your infrastructure

Got Counter Intelligence Assets?

Additional Reading:

https://snyk.io/blog/peacenotwar-malicious-npm-node-ipc-package-vulnerability/

https://github.com/RIAEvangelist/node-ipc

http://riaevangelist.github.io/node-ipc/