More detailed write-up and summary of events that I put up here: <a href="https://snyk.io/blog/peacenotwar-malicious-npm-node-ipc-package-vulnerability/" rel="nofollow">https://snyk.io/blog/peacenotwar-malicious-npm-node-ipc-pack...</a>