<i>NPM package ‘ua-parser-JS’ with more than 7M weekly download is compromised</i> - <a href="https://news.ycombinator.com/item?id=28962168" rel="nofollow">https://news.ycombinator.com/item?id=28962168</a> - Oct 2021 (137 comments)
Related post <a href="https://news.ycombinator.com/item?id=28973802" rel="nofollow">https://news.ycombinator.com/item?id=28973802</a>