importantSYS.SOURCE: The Hacker News• 2026-08-25T17:22:43+05:30

24 npm Packages Exploit Unpkg Mirrors for Phishing via Fake Cloudflare CAPTCHA Pages

#npm #phishing #cybersecurity

24 npm packages are being used to host fake Cloudflare CAPTCHA pages via unpkg mirrors, redirecting users to phishing infrastructure. Attackers leverage legitimate services like KeyVal to dynamically resolve phishing URLs, exploiting open-source ecosystems for malicious purposes.

Cybersecurity researchers have disclosed details of a new campaign that uses a cluster of 24 npm packages as free phishing infrastructure for redirecting to ClickFix-style fake CAPTCHA pages.

"While the malware is simply a single HTML page inside the npm package, and while downloading it wouldn't do harm, the threat actor’s use of npm isn't to infect developers who install it, but to use the

Read original article

*** END OF TRANSMISSION ***

> OPTIMIZING LLM OUTPUT EFFICIENCY THROUGH HISTORICAL TELEGRAPHESE COMPRESSION TECHNIQUES > CISO INSIGHTS REVEAL CYBER RISK SHIFTS TOWARD INTERNAL WORKFLOWS > FBI WARNS OF ONGOING FORTIBLEED CAMPAIGN TARGETING FORTINET DEVICES WITH 86,644 CREDENTIALS COMPROMISED > CRITICAL ATLASSIAN DATA CENTER VULNERABILITY CVE-2026-21589 EXPLOITED WITHIN TWO HOURS OF DISCLOSURE > AGENTIC PENTESTING: PROOFS, LIMITATIONS, AND CONTINUOUS VALIDATION CHALLENGES > CHROME INTEGRATES JPEG XL FOR ENHANCED IMAGE COMPRESSION > EXPLOITING LARGE LANGUAGE MODELS AND DATA POISONING TO MANIPULATE CONSENSUS > ADVANCEMENTS IN SYNTHETIC BIOLOGY ENABLE CREATION OF MIRROR-LIFE ORGANISMS > CANADIAN STUDY WARNS PERMANENT DAYLIGHT SAVING TIME POSES RISKS TO SLEEP AND MENTAL HEALTH > RISING PS5 JAILBREAKS POSE SIGNIFICANT SECURITY CHALLENGES> OPTIMIZING LLM OUTPUT EFFICIENCY THROUGH HISTORICAL TELEGRAPHESE COMPRESSION TECHNIQUES > CISO INSIGHTS REVEAL CYBER RISK SHIFTS TOWARD INTERNAL WORKFLOWS > FBI WARNS OF ONGOING FORTIBLEED CAMPAIGN TARGETING FORTINET DEVICES WITH 86,644 CREDENTIALS COMPROMISED > CRITICAL ATLASSIAN DATA CENTER VULNERABILITY CVE-2026-21589 EXPLOITED WITHIN TWO HOURS OF DISCLOSURE > AGENTIC PENTESTING: PROOFS, LIMITATIONS, AND CONTINUOUS VALIDATION CHALLENGES > CHROME INTEGRATES JPEG XL FOR ENHANCED IMAGE COMPRESSION > EXPLOITING LARGE LANGUAGE MODELS AND DATA POISONING TO MANIPULATE CONSENSUS > ADVANCEMENTS IN SYNTHETIC BIOLOGY ENABLE CREATION OF MIRROR-LIFE ORGANISMS > CANADIAN STUDY WARNS PERMANENT DAYLIGHT SAVING TIME POSES RISKS TO SLEEP AND MENTAL HEALTH > RISING PS5 JAILBREAKS POSE SIGNIFICANT SECURITY CHALLENGES