CISA warns of malware discovered in npm package UAParser.js, which has 6M-7M downloads weekly, that installs a password stealer and a crypto miner on systems (Catalin Cimpanu/The Record)

via Techmeme https://ift.tt/3nguePO