Mock the supply chain attacks from peacenotwar

[morlay]

It is supply chain attacks, whatever the motive.

A vendor package, which CREATING FILE out of project, is a malware.

https://snyk.io/blog/peacenotwar-malicious-npm-node-ipc-package-vulnerability/

How to quick fix, if have to the related packages:

npm:

// package.json
{
  "overrides": {
    "peacenotwar": "git+ssh://git@github.com/morlay/peacenotwar.git"
  }
}

pnpm:

// package.json
{
  "pnpm": {
    "overrides": {
      "peacenotwar": "git+ssh://git@github.com/morlay/peacenotwar.git"
    }
  }
}

Links:

https://github.com/RIAEvangelist/peacenotwar/issues/5
https://github.com/RIAEvangelist/node-ipc/issues/233

[morlay]

Related：

vuejs/vue-cli#7054