The node-ipc npm package was compromised again (versions 9.1.6, 9.2.3, 12.0.1) with obfuscated stealer/backdoor code that fingerprints systems, exfiltrates files, and steals data. JavaScript developers using these versions were affected, and Socket's AI detection flagged the malware within three minutes of publication — notably, this is a re-compromise of the same package previously exploited in 2022.