3 ms·
Malware found in [UAParser.js] NPM package with millions of weekly downloads
- rain1 5y agoThis is a total disaster.
- eyelidlessness 5y agoIt’s a mitigated disaster. The affected versions have all been removed from NPM, and were only available for a few hours. I’m not saying it’s not bad, but knowing it’s mostly resolved is important context.