Popular NPM package UA-Parser-JS poisoned with cryptomining, password-stealing | Heykuki News