Security News 27 Malicious npm Packages Used as Phishing Infrastructure to Steal Login Credentials TheHackerNews Daniel Bender 29 Dec 2025 Researchers uncovered 27 malicious npm packages used over five months to host phishing pages that steal credentials from targeted organizations.