Just a heads up about the node-ipc package

[bf-software]

Hi James,

I've used this repository and your articles about using IPC communication with electron with much success--they've been super helpful!

I just wanted to post a heads up about the node-ipc package: sadly the author sabotaged it in March of 2022 by adding malware aimed at machines with Russian IP addresses. see: malware article

I'll be looking for alternatives for node-ipc now.... If you have any recommendations I'd appreciate it!

Thanks,
Bill.

[Leedehai]

fwiw I found a drop-in replacement @node-ipc/node-ipc (GitHub, npm, https://node-ipc.github.io/). I believe some others have forked this package as well.

If one simply searches node-ipc, NPM is still displaying the malicious original package though, so be careful.