Malicious node-ipc versions published to npm in suspected maintainer account compromise
Source: Snyk Security Blog · Category: Supply Chain
Popular npm package node-ipc compromised via maintainer account takeover; malicious versions published May 14, 2026. Critical if firm uses node-ipc in internal development or client-facing applications; escalate to development/DevOps teams immediately for inventory and patching.