Code added to popular NPM package wiped files in Russia and Belarus

> concerns about the safety of free and open source software

That sounds like phrasing intended to cause anti-FOSS FUD. There's nothing about FOSS that makes it more susceptible to this than proprietary software is.