In October 2021, the UAParserJS package was compromised. Three malicious versions were published, which included malware that executed immediately upon installation. This malware primarily targeted Windows and Linux users, stealing passwords and installing a Monero cryptocurrency miner.