Versions of a popular NPM package named ua-parser-js was found to contain malicious code. ua-parser-js is used in apps and websites to discover the type of device or browser a person is using from User-Agent data. A computer or device with the affected software installed or running could allow a...

Link: Malware Discovered in Popular NPM Package, ua-parser-js
via us-cert.cisa.gov