Popular NPM package UA-Parser-JS poisoned with cryptomining, password-stealingportswigger.net2 pointsfeross5 years ago