Attackers had added malicious code to the rand-user-agent package, which is used for automatic tests and web scraping, among other things.

Supply chain attack compromises the popular rand-user-agent scraping NPM package to deploy and activate a backdoor.