Wow, what recourse is available in this situation? None? Does this mean that 100% they are going to now be blackmailed to get their domain back?
Usually there's a grace period where the owner can still renew it, and before anyone else can. If the domain actually expired 60 or 90 days ago then they're probably hosed.
Doing a quick Whois for nodejs.org show that the name is expiring today:
Domain ID:D157222203-LROR
Domain Name:NODEJS.ORG
Created On:29-Sep-2009 14:50:55 UTC
Last Updated On:20-Sep-2011 00:04:23 UTC
Expiration Date:29-Sep-2012 14:50:55 UTC
Sponsoring Registrar:eNom, Inc. (R39-LROR)
Status:OK
Ouch!