NPM package ‘ua-parser-JS’ with more than 7M weekly download is compromisedold.reddit.com255 pointsgeocrasher5 years ago