Malicious Npm Packages Used In Phishing

Researchers have uncovered a new and unusual credential harvesting campaign, dubbed Beamglea, that abuses the npm registry and a content delivery network (CDN) to create a robust phishing infrastruct…