Compromised NPM packages of ua-parser-JS (0.7.29, 0.8.0, 1.0.0)github.com/faisalman 38nop_slide4y6 comments