BREAKING!! NPM package ‘ua-parser-js’ with more than 7M weekly download is compromised

1

Deno

#Typescript #JavaScript #Web Development Tools 195 social mentions

2

Diffend.io

Machine learning. I'm the creator of https://diffend.io - we recently started working with NPM on a bigger scale (a few weeks ago) and Diffend did find it and blocked it for Diffend users but I did not manage to report it fast enough to npm.

#Security #Web Application Security #Ruby 1 social mentions