As cited
Copy frozen at (site build).
threat intel
24 npm Packages Abuse unpkg Mirrors to Host Fake Cloudflare CAPTCHA Pages
Researchers identified a campaign using 24 npm packages to host phishing pages that redirect users to fake Cloudflare CAPTCHA pages. The packages contain a single HTML file and rely on unpkg mirrors to serve the malicious content. Developers installing these packages are not the primary targets; instead, the infrastructure abuses npm for distribution.
Why it matters: Developers and users of npm packages may unknowingly encounter phishing pages, risking credential theft or malware exposure.
- Source published
- First seen by Cybersecurity Tracker
Source attribution
Correction
Correction recorded as of .
threat intel
24 npm Packages Abuse unpkg Mirrors to Host Fake Cloudflare CAPTCHA Pages
Researchers identified a campaign using 24 npm packages to host phishing pages that redirect users to fake Cloudflare CAPTCHA pages. The packages contain a single HTML file and rely on unpkg mirrors to serve the malicious content. Developers installing these packages are not the primary targets; instead, the infrastructure abuses npm for distribution.
Why it matters: Developers and users of npm packages may unknowingly encounter phishing pages, risking credential theft or malware exposure.
- Source published
- First seen by Cybersecurity Tracker