3 ms·
Popular NPM library hijacked to install password-stealers, miners
- dang 5y agoNPM package ‘ua-parser-JS’ with more than 7M weekly download is compromised - https://news.ycombinator.com/item?id=28962168 https://news.ycombinator.com/item?id=28962168 - Oct 2021 (137 comments)