duskload/react-device-detect

ua-parser move to a patched version after malware issue

chtay1 opened this issue · 1 comments

chtay1 commented

ua-parser.js was compromised and was installing malware on effected systems. Whilst react-device-detect did not depend on a compromised version it would be a good idea to update the package reference to one of the patched versions.

Compromised versions: 0.7.29, 0.8.0, 1.0.0

Patch versions: 0.7.30, 0.8.1, 1.01

duskload commented

@chtay1 Updated to 0.7.30. New version is available at npm.

  • 👍1