News for hackers. Stuff that matters.

A comment on NPM package ‘ua-parser-JS’ with more than 7M weekly download is compromised.

Re:NPM package ‘ua-parser-JS’ with more than 7M weekly downl... by roofwellhams on Saturday October 23, 2021 @12:03AM (#28965605)
- steals cookies and browser data on windows: this means your browser cookies and all logged in accounts might be compromised. Maybe even passwords saved in browser. I'd even extend to password manager extensions.

- crypto miner on both platforms

- maybe: changes registry for existing crypto miners

[ Parent | on HN ]

There are no comments on this comment yet.