OX Security researchers identified a cluster of 24 npm packages abusing unpkg mirrors to host fake Cloudflare CAPTCHA pages. The campaign uses legitimate infrastructure for phishing, highlighting the evolving tactics of threat actors.
OX Security researchers identified a cluster of 24 npm packages abusing unpkg mirrors to host fake Cloudflare CAPTCHA pages. The campaign uses legitimate infrastructure for phishing, highlighting the evolving tactics of threat actors.