Unverified50% confidenceEventExact time
In 2021, popular npm packages such as ua-parser-js and colors were subjected to malicious code injection incidents.
1
Sources
50%
Confidence
Long-term
Relevance
9/23/2026
First Seen
Sources
Related Entities
Related Claims
VerifiedIn 2021, the npm package ua-parser-js was hijacked72% similarUnverified2022年colors.js和faker.js事件中，维护者Marak Squires在代码中注入无限循环，导致数千个依赖项目崩溃70% similarVerifiedThe ua-parser-js supply chain attack occurred in 2021.66% similarUnverifiednpm 的 event-stream 事件发生于2018年，ua-parser-js 事件发生于2021年62% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/943437API
curl https://kongchang.com/api/v1/knowledge/claims/943437MCP
get_claim(id=943437)