S1 E31: Opinión: ¿Protestware o Malware en node-ipc?

My typeof Radio | desarrollo web en español

Content provided by Arturo Mosqueda | Axel Martínez. All podcast content including episodes, graphics, and podcast descriptions are uploaded and provided directly by Arturo Mosqueda | Axel Martínez or their podcast platform partner. If you believe someone is using your copyrighted work without your permission, you can follow the process outlined here https://ro.player.fm/legal.

3+ y ago 1:14:06

MP3•Pagina episodului

Fetch error

Hmmm there seems to be a problem fetching this series right now. Last successful fetch was on November 23, 2025 15:17 (13d ago)

What now? This series will be checked again in the next day. If you believe it should be working, please verify the publisher's feed link below is valid and includes actual episode links. You can contact support to request the feed be immediately fetched.

Platicamos de varios hechos ocurridos en NPM con node-ipc y otros paquetes del mismo maintainer.
¿Tú qué dices? Es esto protestware, una nueva forma de expresión a través del software libre, ¿O esto se trata de malware?
¡Cuéntanos qué piensas de esto: @mytypeofradio en Twitter, Instagram y Facebook!
Snyk Post:
https://snyk.io/blog/peacenotwar-malicious-npm-node-ipc-package-vulnerability/
LunaSec Post:
https://www.lunasec.io/docs/blog/node-ipc-protestware/
RIAEvangelist - Brandon Nozaki Miller en YouTube
https://www.youtube.com/c/BrandonNozakiMiller/videos
node-ipc:
https://github.com/RIAEvangelist/node-ipc
peacenotwar:
https://www.npmjs.com/package/peacenotwar
Buffer.from
https://nodejs.org/api/buffer.html#static-method-bufferfromstring-encoding
"Un dev en Nebraska"
https://www.explainxkcd.com/wiki/index.php/2347:_Dependency
DBAD license:
https://dbad-license.org/
Thread en Twitter al respecto:
https://twitter.com/mmartin_joo/status/1505101543225319425
Respuesta de @ipgeolocationio
https://twitter.com/ejaxf/status/1505447352068452354?t=fu0zAVoftpNqmQfNNGR0Sg&s=09
Blog de IP Geolocation API
https://ipgeolocation.io/blog.html
La ONG afectada
https://twitter.com/julian0liver/status/1504948168362012679
Lista de proyectos que dependen de node-ipc
https://github.com/zlw9991/node-ipc-dependencies-list#aaron-dewes-node-ipc-fork
OWASP: Seguridad en NPM
https://cheatsheetseries.owasp.org/cheatsheets/NPM_Security_Cheat_Sheet.html
La postura de Open Source Initiative:
https://opensource.org/blog/open-source-protestware-harms-open-source
Endo
https://github.com/endojs/endo

Mándanos un mensaje

Support the show

Redes Sociales:

Patreon: https://www.patreon.com/cw/mytypeofradio

Bluesky: @mytypeof.dev
Twitter: @mytypeofradio
Facebook: My typeof Radio
Instagram: @mytypeofradio
YouTube: @mytypeofradio
Mastodon: @[email protected]
Nuestra página web:
https://mytypeof.dev
Mándanos un correo:
[email protected]

72 episoade

#Tecnología #Arturo Mosqueda | Axel Martínez #Software #Desarrollo Web #Web Development #Web Development En Español #Webdev #Vue #Carreras #Países Bajos Negocio #Educación #JavaScript #Desarrollo de Software #Vue.js