Hackers abuse npm mirrors to host phishing redirect pages

By Lawrence Abrams

Threat actors are abusing npm and its mirrors to host malicious HTML pages that impersonate Cloudflare CAPTCHAs to redirect visitors to attacker-controlled websites. [...]