Threat actors are abusing legitimate NPM infrastructure in a new phishing campaign that breaks from the typical supply chain attack pattern.

Many organizations lack complete visibility into all JavaScript code executing on their pages. Scripts can dynamically load ...