That's what I didn't expect. Does anyone know if there was a term protestware before?
Description and Drama (author deletes comments).
The node-ipc package (used in vue-cli, Unity, more than a million downloads per week) has a commit with obfuscated code. The code overwrites files on the device and replaces them with files with emoji hearts, if this code was launched from a Russian or Belarusian IP.
The authors of vue-cli have released an update in which they fixed the dependency on the node-ipc version without malicious code. Unity Hub has also been updated. The package has been added to the blacklist npmmirror.com .