DevThe Hacker Newsabout 3 hours ago
24 npm Packages Host Fake CAPTCHA Phishing Pages
1 min read
A campaign uses 24 npm packages as free phishing infrastructure, hosting fake Cloudflare CAPTCHA pages on unpkg mirrors. The pages redirect victims to ClickFix-style phishing, with remote logic currently sending users to ChatGPT. The threat actor switched to KeyVal after Microsoft typosquat domain was blocked.
Level
Hype check
Tap to vote and see what everyone thinks.
In this storyCloudflare
Summary by ByteBrief
