The maintainer added code ('peacenotwar') that overwrote files with a heart emoji on machines geolocated to Russia and Belarus.
node-ipc is a dependency of Vue CLI and others; destructive payload on a widely-used package.
A maintainer intentionally added disruptive or destructive behaviour, often politically motivated.
Attacks like this are why dependency provenance matters. Scan your manifests against the Gold database; a free CI gate that blocks risky dependencies before they merge is coming soon.