🧰 node-ipc

The items that name it 3

• Socket: node-ipc npm Package Compromised
  writeup2026-05-30
• SubQuery npm package (@subql/common) compromised with credential-stealing payload
  articleIt is written here as node-ipc (npm package).

  npm package with 10 million weekly downloads compromised on May 14, cited as part of the pattern leading to this wave.

• Active Supply Chain Attack: Malicious node-ipc Versions Published to npm
  writeup

  Malicious, fabricated release; published 2026-05-14; no targeting gate, executes full payload on any system