Popular NPM library hijacked to install password-stealers, miners

bleepingcomputer.com

11 pointsbryan01 comment

NPM package ‘ua-parser-JS’ with more than 7M weekly download is compromised - https://news.ycombinator.com/item?id=28962168 - Oct 2021 (137 comments)