NPM package ‘ua-parser-JS’ with more than 7M weekly download is compromised | Heykuki News