Open-source Software Erase The Hard Drives Of Computers In Russia And Belarus

Share post:

A maintainer has been criticized for creating a poisonous open-source npm program that can erase the hard drives of computers located in Russia and Belarus.

The open-code npm source-code package called peacenotwar was written by Brandon Nozaki Miller, JavaScript’s package manager maintainer RIAEvangelist.

The package has a 9.8 severity rating. It is tracked as CVE-2022-23812. It contains malicious code that targets users with IP located in Russia or Belarus and overwrites their files with a heart emoji.

Miller initially wrote the code to protest Russia’s invasion of Ukraine. However, other capabilities were added and soon, the code started destroying computers’ file systems.

Liran Tal, the Snyk researcher who uncovered the problem explain that such action could result in the maintainer not being trusted again.

“Even if the deliberate and dangerous act of maintainer RIAEvangelist will be perceived by some as a legitimate act of protest, how does that reflect on the maintainer’s future reputation and stake in the developer community?” Tal said.

For more information, read the original story in ZDNet.

SUBSCRIBE NOW

Related articles

Microsoft tries to regain trust of government cybersecurity leadership

Microsoft has embarked on an aggressive campaign to restore and enhance its cybersecurity image and regain trust within...

Generational divide and mismatch between AI excitement and usage: Study

Despite the buzz surrounding artificial intelligence (AI) tools like ChatGPT, a new study reveals that daily usage among...

T-Mobile Set to Acquire Majority of U.S. Cellular in $4.4 Billion Deal

T-Mobile has announced its plans to acquire most of U.S. Cellular in a significant $4.4 billion transaction. This...

Google suffers another embarrassing AI launch. Hashtag Trending for Tuesday, May 28th, 2024

London Drugs refused to pay ransom and data is leaked. Another epic AI fail from Google, Meta’s chief...

Become a member

New, Relevant Tech Stories. Our article selection is done by industry professionals. Our writers summarize them to give you the key takeaways