Unverified60% confidenceEventExact time
The 2021 ua-parser-js supply chain attack affected a package with over 8 million weekly downloads.
2
Sources
60%
Confidence
Long-term
Relevance
7/18/2026
First Seen
Sources
Related Claims
Unverified2021年的ua-parser-js劫持事件影响了数千万用户77% similarUnverified2020年的event-stream事件中，一个每周下载量逾200万次的npm开源包被转让后被植入恶意代码66% similarUnverifiedA 2021 study targeting PyPI found thousands of typosquatting packages lurking in the repository for extended periods, with some packages accumulating tens of thousands of downloads before being detected.63% similarUnverifiedIn 2021, the REvil ransomware group attacked Kaseya's VSA product, impacting more than 1,500 businesses worldwide in a single incident.62% similarUnverified在 2021 到 2023 年间，Tailwind 的 npm 周下载量从数百万激增至数千万61% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/547671API
curl https://kongchang.com/api/v1/knowledge/claims/547671MCP
get_claim(id=547671)