[KongchangAI]
Expired60% confidenceEventTime unknown

In the 2021 ua-parser-js incident, attackers hijacked an npm package with more than 7 million weekly downloads and injected a mining trojan.

2
Sources
60%
Confidence
Long-term
Relevance
6/1/2026
First Seen
Valid until: 8/30/2026(expired)

Sources

Zerobox: A Lightweight Process Sandbox Derived from OpenAI Codex for Secure AI Code Execution
githubafshinm

Related Entities

ua-parser-jsproductnpmproduct

Related Claims

UnverifiedHive勒索组织在被FBI查封前已累计攻击1500余个目标55% similarUnverifiedThe U.S. Space Surveillance Network (SSN) tracks more than 27,000 pieces of space debris larger than 10 cm, and debris between 1 cm and 10 cm is estimated to exceed 500,000 pieces.51% similar

Cite This Claim

Stable URI
https://kongchang.com/claim/32296
API
curl https://kongchang.com/api/v1/knowledge/claims/32296
MCP
get_claim(id=32296)