On March 15, 2022, users of the popular Vue.js frontend JavaScript framework started experiencing what can only be described as a supply chain attack impacting the npm ecosystem. This was the result of the nested dependencies node-ipc and peacenotwar being sabotaged as an act of protest by the maintainer of the node-ipc package. This security incident involves destructive acts of corrupting files
![Alert: peacenotwar module sabotages npm developers in the node-ipc package to protest the invasion of Ukraine | Snyk](https://cdn-ak-scissors.b.st-hatena.com/image/square/70c36637667bbb4127eb9717dbc6742260836825/height=288;version=1;width=512/https%3A%2F%2Fres.cloudinary.com%2Fsnyk%2Fimage%2Fupload%2Fv1663098656%2Fwordpress-sync%2Ffeature-peacenotwar-node-ipc.jpg)