
Security News
Re-Enabled GitHub Actions Expose Thousands of Repositories to Mini Shai-Hulud
Two compromised GitHub Actions were re-enabled with malicious tags intact, exposing thousands of downstream repositories to Mini Shai-Hulud.
@aws-sdk/util-user-agent-browser
Advanced tools
[](https://www.npmjs.com/package/@aws-sdk/util-user-agent-browser) [](https://www.n
In previous versions of the AWS SDK for JavaScript v3, the AWS SDK user agent header was provided by parsing the navigator user agent string with the bowser library.
This was later changed to browser feature detection using the native Navigator APIs, but if you would like to have the previous functionality, use the following code:
import { createUserAgentStringParsingProvider } from "@aws-sdk/util-user-agent-browser";
import { S3Client } from "@aws-sdk/client-s3";
import pkgInfo from "@aws-sdk/client-s3/package.json";
// or any other client.
const client = new S3Client({
defaultUserAgentProvider: createUserAgentStringParsingProvider({
// For a client's serviceId, check the corresponding shared runtimeConfig file
// https://github.com/aws/aws-sdk-js-v3/blob/main/clients/client-s3/src/runtimeConfig.shared.ts
serviceId: "S3",
clientVersion: pkgInfo.version,
}),
});
This usage is not recommended, due to the size of the additional parsing library.
The 'useragent' package is a comprehensive library for parsing and handling user-agent strings. It provides detailed information about the browser, operating system, and device. Compared to @aws-sdk/util-user-agent-browser, 'useragent' offers more extensive parsing capabilities but is not specifically tailored for AWS SDK usage.
The 'ua-parser-js' package is a lightweight JavaScript library for parsing user-agent strings. It can identify the browser, engine, OS, and device from a user-agent string. While it offers similar functionality in terms of parsing user-agent strings, it does not provide the AWS-specific customizations available in @aws-sdk/util-user-agent-browser.
FAQs
[](https://www.npmjs.com/package/@aws-sdk/util-user-agent-browser) [](https://www.n
The npm package @aws-sdk/util-user-agent-browser receives a total of 13,570,295 weekly downloads. As such, @aws-sdk/util-user-agent-browser popularity was classified as popular.
We found that @aws-sdk/util-user-agent-browser demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 2 open source maintainers collaborating on the project.

Security News
Two compromised GitHub Actions were re-enabled with malicious tags intact, exposing thousands of downstream repositories to Mini Shai-Hulud.

Research
/Security News
A malicious Firefox extension fetches its payload after installation to evade detection, steal Google session cookies, and automate account takeover.

Research
/Security News
The compromise affects MemTensor's MemOS, an open source memory framework for large language models (LLMs) and AI agents. Both npm package @memtensor/memos-cloud-openclaw-plugin and the PyPI package MemoryOS are compromised. They drop cross-platform Go binaries that exfiltrate developer secrets.