Dec 302025 27 Malicious npm Packages Used as Phishing Infrastructure to Steal Login Credentials Researchers uncovered 27 malicious npm packages used over five months to host phishing pages that steal credentials from targeted organizations.