CyberSecurityBoardThreat Intel · CVEs · Products
Cyber Products

unpkg: npm Mirror Abused for Phishing

August 25, 2026

unpkg is a content delivery network for npm packages. Threat actors have abused it to host malicious HTML files that render as fake Cloudflare CAPTCHA pages, leveraging the trusted domain for phishing.