Code-Sabotage Incident in Protest of Ukraine War Exposed Open Source Risks

The maintainer of a widely used npm module served up an unwelcome surprise for developers.