Embed the Eddyter rich text editor in Flutter apps on Android and iOS through a WebView. Requires a licensed Eddyter API key. Changelog excerpt: - First stable release, published as `eddyter_flutter`(previously `richtext_core_flutter`). Update the dependency and import `package:eddyter_flutter/eddyter_flutter.dart`. - Load `@eddyter/core@1.0.4`(latest) from unpkg (editor `eddyter@1.4.27`). - Requires Flutter 3.44+ / Dart 3.12+ (the floor set by `webview_flutter`). - Android: drop the unused `READ_MEDIA_IMAGES`permission. Gallery picks use the system photo picker, and the permission triggers a Google Play photo/video policy declaration for host apps.

Criminosos cibernéticos estão usando o repositório npm e servidores espelho para hospedar páginas falsas e aplicar golpes. Ao contrário de invasões tradicionais, o objetivo é transformar plataformas públicas de desenvolvedores em servidores gratuitos para fraudes. Pesquisadores da OX Security e da IntelFusions identificaram dezenas de pacotes compostos apenas por páginas HTML que imitam testes de segurança da Cloudflare. Quando esses arquivos são abertos por meio de serviços como o UNPKG, eles carregam sob domínios oficiais e legítimos, o que reduz as chances de bloqueio por filtros e antivírus. Após o teste na tela, a página transfere o usuário para sites controlados pelos invasores, com links que podem ser alterados à distância. Analistas alertam que esses arquivos continuam disponíveis nos espelhos mesmo após a exclusão do pacote original no npm.

A campaign uses 24 npm packages and unpkg mirrors to host fake Cloudflare CAPTCHA pages that can redirect users to attacker-chosen sites.

replicated using mirroring platforms such as UNPKG and npmmirror read more about Hackers abuse npm mirrors to host phishing redirect pages

Cybersecurity researchers have disclosed details of a new campaign that uses a cluster of 24 npm packages as free phishing infrastructure for redirecting to ClickFix-style fake CAPTCHA pages. "While the malware is simply a single HTML page inside the npm package, and while downloading it wouldn't do harm, the threat actor’s use of npm isn't to infect developers who install it, but to use the

Threat actors are abusing npm packages and mirrors like UNPKG and npmmirror to host malicious HTML pages that impersonate Cloudflare CAPTCHAs and redirect users to attacker-controlled destinations. The campaign uses legitimate infrastructure as free hosting for phishing pages, with some redirects pointing to Microsoft login themes, ChatGPT, or dynamically controlled URLs. #Cloudflare #npm #UNPKG #npmmirror #Turnstile

Threat actors are uploading minimalist packages to the npm registry to store malicious HTML files hosted via unpkg mirrors. The technique displays fraudulent Cloudflare CAPTCHAs to redirect users to external phishing infrastructure while evading bro…

Haz clic para acceder al contenido completo.

A campaign uses 24 npm packages and unpkg mirrors to host fake Cloudflare CAPTCHA pages that can redirect users to attacker-chosen sites.

A campaign uses 24 npm packages and unpkg mirrors to host fake Cloudflare CAPTCHA pages that can redirect users to attacker-chosen sites.

Cybersecurity researchers have disclosed details of a new campaign that uses a cluster of 24 npm packages as free phishing infrastructure for redirecting to ClickFix-style fake CAPTCHA pages. "While the malware is simply a single HTML page inside the npm package, and while downloading it wouldn't do harm, the threat actor’s use of npm isn't to infect developers who install it, but to use the