Hackers abuse npm mirrors to host phishing redirect pages

BleepingComputer by Lawrence Abrams 26 August 2026, 00:39 EEST Security Cloud

Threat actors are abusing npm and its mirrors to host malicious HTML pages that impersonate Cloudflare CAPTCHAs to redirect visitors to attacker-controlled websites.

Read the full story on BleepingComputer https://www.bleepingcomputer.com/news/security/hackers-abuse-npm-mirrors-to-host-phishing-redirect-pages/

Attacks like this land on ordinary sites far more often than on chosen targets. If you would rather your site never became the story, CrockyHost hosting ships with daily backups, automatic updates and a firewall we manage.

Keep reading

LACMA data breach last year exposed social security and medical data BleepingComputer
AnonyMousKIT PhaaS uses voice AI agents to phish iPhone passcodes BleepingComputer
U.S. Sanctions Iran-Linked Hackers Behind Critical Infrastructure Breaches The Hacker News
Hospital operator Nutex Health says data stolen in cyberattack BleepingComputer