NPM library UA-Parser-JS hijacked
Image Description
Common Information
Type Value
UUID ed8bbfea-7a6b-4c61-a4ac-2989f100bfde
Fingerprint 60348423b38fedae194428804da381caa5ca306604b399581845a2f415ee245b
Analysis status DONE
Considered CTI value 2
Text language
Published Oct. 26, 2021, 10:31 a.m.
Added to db March 10, 2024, 11:22 a.m.
Last updated Aug. 31, 2024, 8:32 a.m.
Headline NPM library UA-Parser-JS hijacked
Title NPM library UA-Parser-JS hijacked
Detected Hints/Tags/Attributes 30/2/23
Attributes
Details Type #Events CTI Value
Details Domain 3
citationsherbe.at
Details Domain 154
us-cert.cisa.gov
Details Domain 251
www.bleepingcomputer.com
Details Domain 18
www.npmjs.com
Details Domain 4127
github.com
Details Domain 268
www.virustotal.com
Details File 12
preinstall.js
Details File 4
jsextension.exe
Details File 8
sdd.dll
Details File 3
create.dll
Details File 459
regsvr32.exe
Details Github username 3
faisalman
Details sha256 1
ea131cc5ccf6aa6544d6cb29cdb78130feed061d2097c6903215be1499464c2e
Details sha256 1
7f986cd3c946f274cdec73f80b84855a77bc2a3c765d68897fbc42835629a5d5
Details sha256 2
2a3acdcd76575762b18c18c644a745125f55ce121f742d2aad962521bc7f25fd
Details IPv4 3
159.148.186.228
Details Url 1
https://us-cert.cisa.gov/ncas/current-activity/2021/10/22/malware-discovered-popular-
Details Url 1
https://www.bleepingcomputer.com/news/security/popular-npm-library-hijacked-to-
Details Url 1
https://www.npmjs.com/package/ua-parser-js
Details Url 1
https://github.com/faisalman/ua-parser-js/issues/536#issuecomment
Details Url 1
https://www.virustotal.com/gui/file/ea131cc5ccf6aa6544d6cb29cdb78130feed061d2097c6903215be149
Details Url 1
https://www.virustotal.com/gui/file/7f986cd3c946f274cdec73f80b84855a77bc2a3c765d68897fbc428356
Details Url 1
https://www.virustotal.com/gui/file/2a3acdcd76575762b18c18c644a745125f55ce121f742d2aad962521b