Phishing Campaign Utilizes Malicious npm Packages Targeting Various Sectors

A new phishing campaign has emerged, utilizing malicious npm packages to target employees in industrial, energy, and healthcare sectors across Europe, the Middle East, and the United States. Attackers have published multiple versions of these packages, including flockiali, opresc, prndn, oprnm, and operni, which serve custom credential harvesting pages. This sophisticated approach leverages trusted software repositories to deliver phishing infrastructure.