A campaign uses 24 npm packages and unpkg mirrors to host fake Cloudflare CAPTCHA pages that can redirect users to attacker-chosen sites.

A campaign uses 24 npm packages and unpkg mirrors to host fake Cloudflare CAPTCHA pages that can redirect users to attacker-chosen sites.

Threat actors are abusing npm and its mirrors to host malicious HTML pages that impersonate Cloudflare CAPTCHAs to redirect visitors to attacker-controlled websites.