The maintainer added code ('peacenotwar') that overwrote files with a heart emoji on machines geolocated to Russia and Belarus.
node-ipc is a dependency of Vue CLI and others; destructive payload on a widely-used package.
A maintainer intentionally added disruptive or destructive behaviour, often politically motivated.
Attacks like this are why dependency provenance matters. Scan your manifests against the Gold database, or add the free CI gate to block risky dependencies before they merge.