UAParser.js - The Essential Web Development Tool for User-Agent Detection. Detect Browsers, OS, Devices, Bots, Apps, AI Crawlers, and more. Run in Browser (client-side) or Node.js (server-side).
Maintainer npm account compromised; malicious versions 0.7.29, 0.8.0, 1.0.0 published containing Linux cryptominer and Windows credential stealer. CISA issued alert.
Source →This report is generated on demand by querying the GitHub API for repository metadata and published security advisories, then cross-referencing our curated database of known supply-chain incidents (xz-utils, event-stream, ua-parser-js, colors.js, tj-actions, Codecov, and more). Results are cached for 24 hours. We do not scan repository code or dependencies — for that, see Snyk or Socket. Verdict: CLEAN ≥80, CAUTION 50–79, COMPROMISED<50.
Repo looks clean but the live deployment might still be exposing headers, CORS, or SSL misconfigurations.
SCAN A URL →