Users who installed the compromised UAParserJS package lost all their passwords and had to reset their online accounts. The malware published in the package included a Monero miner and a DLL file that stole passwords from various programs and the Windows Credential Manager.