Ladies and gentlemen, the fact that I have to talk politics 3 times in less than 3 months is an aberration in itself.
RIAEvangelist, the maintainer of node-ipc, self-sabotaged it by using the malware-like package peacenotwar. Not only that, it also sabotages npm developers (including, but not limited to, Vue CLI users) in order to "protest" the invasion of Ukraine. Not only that, it can also delete files randomly if your IP is geolocated anywhere in Russia
This attitude of developers to "do whatever the fuck we want" has to stop. We have all the power but none of the responsibility. Many were fine when fakerjs (and colors) was self-sabotaged because its author expected payment without asking for it.
Life does have a sense of humor though: I've been working on an Oath for all Scientists for 2 weeks now. I didn't plan on revealing it until it was finalized, but it looks like it might actually be interesting. It's not done yet, but feel free to have a look around.