Hackers Turn Trusted npm Mirrors Into Hosts for Fake Cloudflare ClickFix Pages.

Threat actors are abusing npm’s package-distribution ecosystem to host convincing fake Cloudflare verification pages on trusted mirror domains, turning devel...