Hackers abuse npm mirrors to host phishing redirect pages
August 25, 2026
1 min read
8 views
cybersecurity
malware
news
Threat actors use npm and mirrors like UNPKG as free hosting for malicious HTML pages that impersonate Cloudflare CAPTCHAs and redirect visitors to attacker-controlled sites.
Was this article helpful?
0 found this helpful