Verified80% confidenceEventExact time
In 2021, the ua-parser-js supply chain attack occurred, in which attackers compromised a maintainer's account to publish a malicious version.
4
Sources
80%
Confidence
Long-term
Relevance
9/5/2026
First Seen
Sources
Related Entities
Related Claims
UnverifiedIn the 2021 ua-parser-js incident, attackers took over the account and injected a cryptocurrency mining program.78% similarUnverified2021年的ua-parser-js事件中，攻击者入侵单个被广泛使用的npm包，一次性影响了数以万计的下游项目75% similarUnverified2021年曝光的QNAP NAS勒索软件事件（eCh0raix/QNAPCrypt）中，攻击者利用暴露在公网的管理界面实施攻击，感染量超过数万台70% similarUnverifiedThe 2021 Kaseya VSA incident used a zero-day vulnerability in a remote management tool to launch ransomware attacks against more than 1,500 enterprises in a single operation.67% similarUnverifiedMultiple public cases in 2024 have demonstrated the feasibility of prompt injection attack vectors, including hijacking browser-controlling Agents via malicious web pages to execute fund transfers66% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/860822API
curl https://kongchang.com/api/v1/knowledge/claims/860822MCP
get_claim(id=860822)