2 ms·Popular NPM package UA-Parser-JS poisoned with cryptomining, password-stealing2 points by feross 5y ago