Embedded malware in ua-parser-JS (NPM package) | Heykuki News