npm's Trusted Mirrors Are Moonlighting as Phishing Pages
Imagine a storage facility so reputable that banks put its address on official mail — then someone rents a unit, fills it with a fake ATM, and points victims straight at the "trusted" building. That's essentially what just happened to npm's…