Requests to unpkg.com serving npm package index.html phishing pages

Arnold Chan@slaz

•updated 26 days ago•0•0•0

Detects network requests to unpkg.com or npmmirror for 'index.html' files directly under a package path. This behavior deviates from standard package management usage (which typically fetches tarballs or specific JavaScript modules) and is often associated with adversaries using npm packages as hosting infrastructure for phishing landing pages.