Phishing Campaign Leveraging the NPM Ecosystem

2025-10-10来源 Snyk BlogEnglish

A new phishing campaign weaponizes NPM and the unpkg CDN. Over 175 throwaway packages are used to host scripts that redirect users to credential-harvesting sites. The attack targets enterprise employees through the browser, not developers at install time.

原文：https://www.a8q9.cn/en/article/phishing-campaign-leveraging-the-npm-ecosystem-f22df1.html

Nvidia orders data center clients to reduce China exposure: FT2026-11-03
An idea for adding functionality to Rust regarding shadowing2026-11-03
A shared core for browser apps in Rust/wasm, no UI framework, client and server …2026-11-03
Meta's rumored humanoid robot is another AI services Trojan horse2026-11-03
OpenAI's shared ChatGPT limits could frustrate users2026-11-03
When delivery_uncertain was the wrong label2026-11-03

Phishing Campaign Leveraging the NPM Ecosystem

相关文章