Security News Hackers abuse npm mirrors to host phishing redirect pages BleepingComputer Daniel Bender 25 Aug 2026 Share Threat actors are abusing npm and its mirrors to host malicious HTML pages that impersonate Cloudflare CAPTCHAs to redirect visitors to attacker-controlled websites.