Follow the latest coverage, related explainers and connected technology stories.
Researchers discovered npm packages containing malicious HTML pages that use a fake Cloudflare verification interface to redirect visitors to sites specified by attackers. Publishing the files through mirrors such as UNPKG and npmmirror gives these pages relatively trusted domains, even after the packages are removed from the official registry.