ua-parser-js (0.7.29, 0.8.0, 1.0.0) compromised with malware: https://github.com/faisalman/ua-parser-js/issues/536