Back to blog
Case study
Case Study: The ua-parser-js Compromise
· 1 min read
publishing.
In October 2021, ua-parser-js, an npm library with tens of millions of weekly downloads, was briefly hijacked when its maintainer's npm account was compromised. Malicious versions were published and pulled by countless builds before the bad releases were removed.