Threat actors are abusing npm and its mirrors to host malicious HTML pages that impersonate Cloudflare CAPTCHAs to redirect visitors to attacker-controlled websites. [...]
Hackers abuse npm mirrors to host phishing redirect pages
Résumé + lien vers la source. Sans paywall, sans tracking.