Hackers abuse npm mirrors to host phishing redirect pages
Tue Aug 25 2026
Open Source
Phishing
www.bleepingcomputer.com
Threat actors are abusing npm and its mirrors to host malicious HTML pages that impersonate Cloudflare CAPTCHAs to redirect visitors to attacker-controlled websites. [...]