{"_id":"@cyberhub/trust-ua-parser-js","_rev":"8-49e7019247f883f18050ae8bd9309137","name":"@cyberhub/trust-ua-parser-js","dist-tags":{"latest":"1.0.7"},"versions":{"1.0.0":{"name":"@cyberhub/trust-ua-parser-js","version":"1.0.0","keywords":["ua-parser-js","security","trust-score","vulnerability","pkgtrust","CVE"],"author":{"name":"Nrupak Shah"},"license":"MIT","_id":"@cyberhub/trust-ua-parser-js@1.0.0","maintainers":[{"name":"nrupaks","email":"nrupaks@gmail.com"}],"homepage":"https://nrupak.com/trust/ua-parser-js","bugs":{"url":"https://github.com/nrupaks/pkgtrust/issues"},"dist":{"shasum":"7d59b1d68dac02ab7818f4dd5768d60b0e9a86c4","tarball":"https://registry.npmjs.org/@cyberhub/trust-ua-parser-js/-/trust-ua-parser-js-1.0.0.tgz","fileCount":2,"integrity":"sha512-Ct+edXds3wwXvJb/4J0K84dMTpJP8YpSDHhhvfF2IKMcIx+wpi1H32uP6LnaMb3Gp9rm3edN5BD4EgbKi4vlYg==","signatures":[{"sig":"MEQCIDrqAmkKGZwJoPCY0Zw4dbCmshi0txjlJzwJTJinadqgAiAGYyVLgV1BHn0vPhyxIyxt26J3gK6pWING2YBpJlHS3Q==","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":1586},"_npmUser":{"name":"nrupaks","email":"nrupaks@gmail.com"},"repository":{"url":"git+https://github.com/nrupaks/pkgtrust.git","type":"git"},"_npmVersion":"10.8.2","description":"Security Trust Report for ua-parser-js — 75/100 (B+, standard). Maintainer risk and vulnerability analysis from 8 security databases.","directories":{},"_nodeVersion":"20.20.1","_hasShrinkwrap":false,"_npmOperationalInternal":{"tmp":"tmp/trust-ua-parser-js_1.0.0_1775116414365_0.2751060943545671","host":"s3://npm-registry-packages-npm-production"}},"1.0.1":{"name":"@cyberhub/trust-ua-parser-js","version":"1.0.1","keywords":["ua-parser-js","ua-parser-js","security","security-report","trust-score","vulnerability","npm-audit","npm-security","supply-chain","pkgtrust","audit","scan","risk","risk-assessment","standard"],"author":{"name":"Nrupak Shah","email":"nrupaks@gmail.com"},"license":"MIT","_id":"@cyberhub/trust-ua-parser-js@1.0.1","maintainers":[{"name":"nrupaks","email":"nrupaks@gmail.com"}],"homepage":"https://nrupak.com/trust/ua-parser-js","bugs":{"url":"https://github.com/nrupaks/pkgtrust/issues"},"dist":{"shasum":"8ea0d6a93363cad15650a3cafcbbf57001975f58","tarball":"https://registry.npmjs.org/@cyberhub/trust-ua-parser-js/-/trust-ua-parser-js-1.0.1.tgz","fileCount":2,"integrity":"sha512-BRMiyDYcSuHdJiZXUG9ceSzpxb31qS3h2HV3esee2lz5dNj31ig13F3egv7AC3FsC7PxAdAbfQTw3x+mg7K+ig==","signatures":[{"sig":"MEUCIQCWa6V912M09FRDFAmr4kjOD6pOzUW/8ul73UpxAkkP9QIgKAdxkvGZN5MBEO3szXT6/4UCiJ7W56wpjO33WX744xg=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":3682},"_npmUser":{"name":"nrupaks","email":"nrupaks@gmail.com"},"repository":{"url":"git+https://github.com/nrupaks/pkgtrust.git","type":"git"},"_npmVersion":"10.8.2","description":"Security Trust Report: ua-parser-js@2.0.9 — 67/100 (B, standard). 1 vulnerability found. Maintainer risk, supply chain analysis from 8 security databases.","directories":{},"_nodeVersion":"20.20.1","_hasShrinkwrap":false,"_npmOperationalInternal":{"tmp":"tmp/trust-ua-parser-js_1.0.1_1775154195800_0.9879283020153815","host":"s3://npm-registry-packages-npm-production"}},"1.0.2":{"name":"@cyberhub/trust-ua-parser-js","version":"1.0.2","keywords":["ua-parser-js","ua-parser-js","security","security-report","trust-score","vulnerability","npm-audit","npm-security","supply-chain","pkgtrust","audit","scan","risk","risk-assessment","standard"],"author":{"name":"Nrupak Shah","email":"nrupaks@gmail.com"},"license":"MIT","_id":"@cyberhub/trust-ua-parser-js@1.0.2","maintainers":[{"name":"nrupaks","email":"nrupaks@gmail.com"}],"homepage":"https://nrupak.com/trust/ua-parser-js","bugs":{"url":"https://github.com/nrupaks/pkgtrust/issues"},"dist":{"shasum":"168e08944a2762c1c37123771fa4c2379e5e02fe","tarball":"https://registry.npmjs.org/@cyberhub/trust-ua-parser-js/-/trust-ua-parser-js-1.0.2.tgz","fileCount":2,"integrity":"sha512-Sz2EzGsHuwEY9LL9pw2DvEwlRUXXlkRGE7xKglOhBQgWddRM7lzK5xAAhGiP1FpQWbBbX0d+aWu5XRPk0dprDg==","signatures":[{"sig":"MEUCIC/bXMkmW6R1HM9wr4yAVzLjz2B2omTg5Oyum1vvN++sAiEAsJPrQp+1iDHLrXH6lJObd80PPE6SLS7op2fH+8N6h6M=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":3682},"_npmUser":{"name":"nrupaks","email":"nrupaks@gmail.com"},"repository":{"url":"git+https://github.com/nrupaks/pkgtrust.git","type":"git"},"_npmVersion":"10.8.2","description":"Security Trust Report: ua-parser-js@2.0.9 — 67/100 (B, standard). 1 vulnerability found. Maintainer risk, supply chain analysis from 8 security databases.","directories":{},"_nodeVersion":"20.20.1","_hasShrinkwrap":false,"_npmOperationalInternal":{"tmp":"tmp/trust-ua-parser-js_1.0.2_1775154820006_0.6820885925852558","host":"s3://npm-registry-packages-npm-production"}},"1.0.3":{"name":"@cyberhub/trust-ua-parser-js","version":"1.0.3","keywords":["ua-parser-js","ua-parser-js","security","security-report","trust-score","vulnerability","npm-audit","npm-security","supply-chain","pkgtrust","audit","scan","risk","risk-assessment","standard"],"author":{"name":"Nrupak Shah","email":"nrupaks@gmail.com"},"license":"MIT","_id":"@cyberhub/trust-ua-parser-js@1.0.3","maintainers":[{"name":"nrupaks","email":"nrupaks@gmail.com"}],"homepage":"https://nrupak.com/trust/ua-parser-js","bugs":{"url":"https://github.com/nrupaks/pkgtrust/issues"},"dist":{"shasum":"4f0381cd0828a4f6252cb67eba41ff29de4cb0ea","tarball":"https://registry.npmjs.org/@cyberhub/trust-ua-parser-js/-/trust-ua-parser-js-1.0.3.tgz","fileCount":2,"integrity":"sha512-9UdZ0WxCFOo9kNJYGKSk8NQSF5rE5bUpFwUhaUABserxMcQc6XcA+TPeGI6t2w8egFp3JlgPvU2kU4ijS2s8+A==","signatures":[{"sig":"MEQCIHNlhWGjTd8PJdvvW6Qrt7im3gLhUvnUQd/hw6U5zEXPAiABDC+9jEUpuZHhlSTByfJkJdISikQOdK3kYi3yoFc3qA==","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":3284},"_npmUser":{"name":"nrupaks","email":"nrupaks@gmail.com"},"repository":{"url":"git+https://github.com/nrupaks/pkgtrust.git","type":"git"},"_npmVersion":"10.8.2","description":"Security Trust Report: ua-parser-js@2.0.9 — 67/100 (B, standard). 1 vulnerability found. Maintainer risk, supply chain analysis from 8 security databases.","directories":{},"_nodeVersion":"20.20.1","_hasShrinkwrap":false,"_npmOperationalInternal":{"tmp":"tmp/trust-ua-parser-js_1.0.3_1775156226279_0.5786608602069594","host":"s3://npm-registry-packages-npm-production"}},"1.0.4":{"name":"@cyberhub/trust-ua-parser-js","version":"1.0.4","keywords":["ua-parser-js","ua-parser-js","security","security-report","trust-score","vulnerability","npm-audit","npm-security","supply-chain","pkgtrust","audit","scan","risk","risk-assessment","standard"],"author":{"name":"Nrupak Shah","email":"nrupaks@gmail.com"},"license":"MIT","_id":"@cyberhub/trust-ua-parser-js@1.0.4","maintainers":[{"name":"nrupaks","email":"nrupaks@gmail.com"}],"homepage":"https://nrupak.com/trust/ua-parser-js","bugs":{"url":"https://github.com/nrupaks/pkgtrust/issues"},"dist":{"shasum":"efd26a2a9280aa5efb47909e20d1cc5f3b87af1b","tarball":"https://registry.npmjs.org/@cyberhub/trust-ua-parser-js/-/trust-ua-parser-js-1.0.4.tgz","fileCount":2,"integrity":"sha512-QZQiL/v4V+WYrJK889OpUqKBa6HPp2TjVQywOHH6QeCz9s9pz4r6zmFSS3V0Xq3VQoUmN3wgbaEte3jdjY2ebg==","signatures":[{"sig":"MEQCIF7aQIDlPdQpx7NVmV+2nGwSfD/e9w949pIaLi6uQoMKAiA3dtlJbX2I0TppogPCFviHW1J10hxoZVGgg46/rZRboA==","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":3284},"_npmUser":{"name":"nrupaks","email":"nrupaks@gmail.com"},"repository":{"url":"git+https://github.com/nrupaks/pkgtrust.git","type":"git"},"_npmVersion":"10.8.2","description":"Security Trust Report: ua-parser-js@2.0.9 — 67/100 (B, standard). 1 vulnerability found. Maintainer risk, supply chain analysis from 8 security databases.","directories":{},"_nodeVersion":"20.20.1","_hasShrinkwrap":false,"_npmOperationalInternal":{"tmp":"tmp/trust-ua-parser-js_1.0.4_1775156825022_0.9358955696774531","host":"s3://npm-registry-packages-npm-production"}},"1.0.5":{"name":"@cyberhub/trust-ua-parser-js","version":"1.0.5","keywords":["ua-parser-js","ua-parser-js","security","security-report","trust-score","vulnerability","npm-audit","npm-security","supply-chain","pkgtrust","audit","scan","risk","risk-assessment","standard"],"author":{"name":"Nrupak Shah","email":"nrupaks@gmail.com"},"license":"MIT","_id":"@cyberhub/trust-ua-parser-js@1.0.5","maintainers":[{"name":"nrupaks","email":"nrupaks@gmail.com"}],"homepage":"https://nrupak.com/trust/ua-parser-js","bugs":{"url":"https://github.com/nrupaks/pkgtrust/issues"},"dist":{"shasum":"7e6b38a2596db437694004a3f7cec2017c56bb79","tarball":"https://registry.npmjs.org/@cyberhub/trust-ua-parser-js/-/trust-ua-parser-js-1.0.5.tgz","fileCount":2,"integrity":"sha512-E98RxaS9guWiyBgQD49uEuxWmxOhlZqGf3KUGg5i/Sa9BOsvbo92HBg5VxIjuY3P0YiS640gWaJy4qDlAi/3nQ==","signatures":[{"sig":"MEUCIQCb6MpOyRmiOzwuu0/rrN0yNALnFPG6HtLboo4jN8RZOwIgObxNdofJw4a9tdRRNh8aBWpwxU+SM8+zjugkAnB/Ma0=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":3284},"_npmUser":{"name":"nrupaks","email":"nrupaks@gmail.com"},"repository":{"url":"git+https://github.com/nrupaks/pkgtrust.git","type":"git"},"_npmVersion":"10.8.2","description":"Security Trust Report: ua-parser-js@2.0.9 — 67/100 (B, standard). 1 vulnerability found. Maintainer risk, supply chain analysis from 8 security databases.","directories":{},"_nodeVersion":"20.20.1","_hasShrinkwrap":false,"_npmOperationalInternal":{"tmp":"tmp/trust-ua-parser-js_1.0.5_1775157282820_0.9028751575175278","host":"s3://npm-registry-packages-npm-production"}},"1.0.6":{"name":"@cyberhub/trust-ua-parser-js","version":"1.0.6","keywords":["ua-parser-js","ua-parser-js","security","security-report","trust-score","vulnerability","npm-audit","npm-security","supply-chain","pkgtrust","audit","scan","risk","risk-assessment","standard"],"author":{"name":"Nrupak Shah","email":"nrupaks@gmail.com"},"license":"MIT","_id":"@cyberhub/trust-ua-parser-js@1.0.6","maintainers":[{"name":"nrupaks","email":"nrupaks@gmail.com"}],"homepage":"https://nrupak.com/trust/ua-parser-js","bugs":{"url":"https://github.com/nrupaks/pkgtrust/issues"},"dist":{"shasum":"51f76f276b8979a672a8591dca39460fc49bd044","tarball":"https://registry.npmjs.org/@cyberhub/trust-ua-parser-js/-/trust-ua-parser-js-1.0.6.tgz","fileCount":2,"integrity":"sha512-wcjgGN3juRUG1yhyXLeGwzImEXwrIFwZn1JLs2QEtKsOMDN/F3OHvErqct0JXE55piRAn1F5OTXvQ4j8hpSDHg==","signatures":[{"sig":"MEYCIQC/Zl6voQqGW5WJpgMQj3t1/w8/8rm6OSQq+M+mflMAZgIhAOwbqUVNaUBnYjEm6+FAxA4y/XEAqmh1z9Dg/ooeHYtr","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":3410},"_npmUser":{"name":"nrupaks","email":"nrupaks@gmail.com"},"repository":{"url":"git+https://github.com/nrupaks/pkgtrust.git","type":"git"},"_npmVersion":"10.8.2","description":"Security Trust Report: ua-parser-js@2.0.9 — 67/100 (B, standard). Security incident detected. Maintainer risk, supply chain analysis from 8 security databases.","directories":{},"_nodeVersion":"20.20.1","_hasShrinkwrap":false,"_npmOperationalInternal":{"tmp":"tmp/trust-ua-parser-js_1.0.6_1775158266533_0.41413697009362194","host":"s3://npm-registry-packages-npm-production"}},"1.0.7":{"name":"@cyberhub/trust-ua-parser-js","version":"1.0.7","description":"Security Trust Report: ua-parser-js@2.0.9 — 65/100 (B, standard). 5 vulnerabilities found. Maintainer risk, supply chain analysis from 8 security databases.","keywords":["ua-parser-js","ua-parser-js","security","security-report","trust-score","vulnerability","npm-audit","npm-security","supply-chain","pkgtrust","audit","scan","risk","risk-assessment","CVE-2022-25927","GHSA-fhg7-m89q-25r3","CVE-2020-7793","GHSA-394c-5j6w-4xmx","CVE-2021-4229","standard"],"license":"MIT","author":{"name":"Nrupak Shah","email":"nrupaks@gmail.com"},"repository":{"type":"git","url":"git+https://github.com/nrupaks/pkgtrust.git"},"homepage":"https://nrupak.com/trust/ua-parser-js","_id":"@cyberhub/trust-ua-parser-js@1.0.7","bugs":{"url":"https://github.com/nrupaks/pkgtrust/issues"},"_nodeVersion":"20.20.1","_npmVersion":"10.8.2","dist":{"integrity":"sha512-9pw6VksjCutpJbYFwZX9yCkHVAr6VUn5JJuMJd9WeNyAEDQNkYjbIPR0jhMSvup1VUeBP9YyZbjP0UimIIuGPg==","shasum":"50e3fe14952ab3fe03f1f65cd0295793ad0a222c","tarball":"https://registry.npmjs.org/@cyberhub/trust-ua-parser-js/-/trust-ua-parser-js-1.0.7.tgz","fileCount":2,"unpackedSize":4072,"signatures":[{"keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U","sig":"MEYCIQDkpyr038bWi7UKwLQdZhu3y3qy2sjN5eribDKkkpWP+gIhALE1XpAa+8k+Ar8q/xIMCEY+qnyo1abtZBX/LBKdRSW3"}]},"_npmUser":{"name":"nrupaks","email":"nrupaks@gmail.com"},"directories":{},"maintainers":[{"name":"nrupaks","email":"nrupaks@gmail.com"}],"_npmOperationalInternal":{"host":"s3://npm-registry-packages-npm-production","tmp":"tmp/trust-ua-parser-js_1.0.7_1775212040273_0.03178916437486623"},"_hasShrinkwrap":false}},"time":{"created":"2026-04-02T07:53:34.286Z","modified":"2026-04-03T10:27:20.537Z","1.0.0":"2026-04-02T07:53:34.502Z","1.0.1":"2026-04-02T18:23:15.930Z","1.0.2":"2026-04-02T18:33:40.135Z","1.0.3":"2026-04-02T18:57:06.434Z","1.0.4":"2026-04-02T19:07:05.174Z","1.0.5":"2026-04-02T19:14:42.987Z","1.0.6":"2026-04-02T19:31:06.730Z","1.0.7":"2026-04-03T10:27:20.403Z"},"bugs":{"url":"https://github.com/nrupaks/pkgtrust/issues"},"author":{"name":"Nrupak Shah","email":"nrupaks@gmail.com"},"license":"MIT","homepage":"https://nrupak.com/trust/ua-parser-js","keywords":["ua-parser-js","ua-parser-js","security","security-report","trust-score","vulnerability","npm-audit","npm-security","supply-chain","pkgtrust","audit","scan","risk","risk-assessment","CVE-2022-25927","GHSA-fhg7-m89q-25r3","CVE-2020-7793","GHSA-394c-5j6w-4xmx","CVE-2021-4229","standard"],"repository":{"type":"git","url":"git+https://github.com/nrupaks/pkgtrust.git"},"description":"Security Trust Report: ua-parser-js@2.0.9 — 65/100 (B, standard). 5 vulnerabilities found. Maintainer risk, supply chain analysis from 8 security databases.","maintainers":[{"name":"nrupaks","email":"nrupaks@gmail.com"}],"readme":"# Security Trust Report: ua-parser-js\n\n**[ua-parser-js@2.0.9](https://www.npmjs.com/package/ua-parser-js): 65/100 | Grade: B | Tier: STANDARD** (confidence: ±3)\n\n> Scanned on 2026-04-03 from 8 security databases. [View package on npm →](https://www.npmjs.com/package/ua-parser-js)\n\n## TL;DR\n\n- **5 vulnerabilities found** (0 critical, 5 high)\n- Pin your version and monitor for changes\n\n## ⚠️ Security Incident Background\n\nIn October 2021, versions 0.7.29, 0.8.0, and 1.0.0 were hijacked via a compromised npm account. Malicious code installed a cryptominer and password stealer on affected machines.\n\n## Score Breakdown\n\n```\nMaintainer Trust:  █████████████████░░░ 87/100\nPackage Health:    █████████████████░░░ 83/100\nSupply Chain:      ░░░░░░░░░░░░░░░░░░░░ 0/100\nCommunity:         ███████████████████░ 93/100\n```\n\n### Why this score?\n\n- Supply Chain is 0 because: 5 known CVEs, in breach database\n\n## Vulnerabilities (5 vulnerabilities)\n\n| Severity | Count |\n|----------|-------|\n| 🟠 High | 5 |\n\n- [CVE-2022-25927](https://nvd.nist.gov/vuln/detail/CVE-2022-25927)\n- [GHSA-fhg7-m89q-25r3](https://github.com/advisories/GHSA-fhg7-m89q-25r3)\n- [CVE-2020-7793](https://nvd.nist.gov/vuln/detail/CVE-2020-7793)\n- [GHSA-394c-5j6w-4xmx](https://github.com/advisories/GHSA-394c-5j6w-4xmx)\n- [CVE-2021-4229](https://nvd.nist.gov/vuln/detail/CVE-2021-4229)\n- [GHSA-pjwm-rvh2-c87w](https://github.com/advisories/GHSA-pjwm-rvh2-c87w)\n- [CVE-2020-7733](https://nvd.nist.gov/vuln/detail/CVE-2020-7733)\n- [GHSA-662x-fhqg-9p8v](https://github.com/advisories/GHSA-662x-fhqg-9p8v)\n\n## Key Risk Flags\n\n- 🔴 **CRITICAL**: HISTORICAL BREACH: Cryptominer injected in v0.7.29/0.8.0/1.0.0 (2021) ([evidence](https://www.npmjs.com/package/ua-parser-js/v/0.7.29))\n- 🟠 **HIGH**: Package size doubled between versions\n- 🟠 **HIGH**: 5 HIGH vulnerabilities detected\n\n## 🛠️ What Should You Do?\n\n**Immediate:**\n- 📌 Pin to known-safe version: **0.7.28 or 1.0.33+ (patched)**\n- 📖 Review the security incident above\n\n**Always:** Pin version, run `pkgtrust scan` in CI, monitor at [nrupak.com/trust/ua-parser-js](https://nrupak.com/trust/ua-parser-js)\n\n## Maintainers (1)\n\n- [faisalman](https://www.npmjs.com/~faisalman) ✅ 2FA (freemail) — [Trust profile](https://nrupak.com/trust/maintainer/faisalman)\n\n**Methodology:** 18+ signals across 4 categories (Maintainer 35%, Package 25%, Supply Chain 25%, Community 15%). [Full scoring docs →](https://nrupak.com/trust)\n\n**Check your project:** `npm i -g @cyberhub/pkgtrust && pkgtrust scan ua-parser-js` — [CLI docs](https://npmjs.com/package/@cyberhub/pkgtrust)\n**Data Sources:** GitHub Advisories · OSV.dev · npm audit · Snyk · Socket.dev · npms.io · Bundlephobia · deps.dev\n\n---\n\n*Report by [pkgtrust](https://nrupak.com/trust/ua-parser-js) · [Dashboard](https://nrupak.com/trust) · [Compare](https://nrupak.com/trust/compare) · [CLI](https://npmjs.com/package/@cyberhub/pkgtrust)*\n\n*This is an automated security report. Not affiliated with the ua-parser-js team. Updated 2026-04-03.*","readmeFilename":"README.md"}