Verified75% confidenceEventExact time
In 2021, the npm package ua-parser-js was hijacked
3
Sources
75%
Confidence
Long-term
Relevance
7/7/2026
First Seen
Sources
200KB Minimalist CI/CD Tool: A Lightweight Deployment Solution for Indie Developers to Ditch Jenkins
bilibiliAdestikla6/22/2026
Related Claims
VerifiedThe ua-parser-js supply chain attack occurred in 2021.77% similarUnverifiednpm 的 event-stream 事件发生于2018年，ua-parser-js 事件发生于2021年72% similarUnverified2021年发生 PyPI 投毒事件，2022年发生多起 npm 恶意包事件，造成真实损失61% similarUnverified2021年的sudo堆溢出漏洞CVE-2021-3156存在近十年方被发现60% similarUnverifiednpm 在 2023 年引入了细粒度令牌和发布来源证明（provenance）58% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/124923API
curl https://kongchang.com/api/v1/knowledge/claims/124923MCP
get_claim(id=124923)