🦋 🚨 Socket detected malicious activity in newly published versions of node-ipc, an npm package with 822K weekly downloads.

[bloglab@mstdn.feddit.social]

Socket detected malicious activity in newly published versions of node-ipc, an npm package with 822K weekly downloads.

Affected versions:
node-ipc@9.1.6
node-ipc@9.2.3
node-ipc@12.0.1

Socket’s AI scanner flagged the malware within ~3 minutes of publication.

https://bsky.app/profile/socket.dev/post/3mlt7hexqqc25

#Security #SupplyChain #Bluesky