O old.reddit.com NPM package ‘ua-parser-JS’ with more than 7M weekly download is compromised 255 points geocrasher 5 years ago 141 comments