GCVE-110-OSM-2026-11106

This campaign abuses npm's public registry as a free, trusted-domain hosting platform for phishing pages. When a package is published to npm, CDN mirror services including unpkg.com, npmmirror.com, and yarn automatically make the raw package contents publicly accessible via URLs on their own trusted domains (e.g., unpkg[.]com/<package>@1.0.0/index.html). The threat actor exploited this to distribute a ClickFix phishing page: a fake Cloudflare "verify you are human" interstitial that uses social engineering to trick the visitor before redirecting them to an attacker-controlled destination. Unlike other packages in this campaign that hardcode the redirect target, this package fetches an encrypted value from api.keyval.org — a legitimate key-value storage service abused as a dead-drop — decrypts it client-side, and redirects the visitor there. This design lets the operator silently change the phishing destination for every already-deployed copy without modifying the npm package. The current observed destination is the legitimate ChatGPT site, but this is not a durable indicator — the infrastructure is explicitly designed to pivot. The victim is a web user who reaches one of these mirror URLs, not a developer installing a dependency. The package contains a single file, `index.html`, declared as `main` in `package.json`. The payload is activated only when a browser loads the file via an npm CDN mirror URL (e.g., unpkg[.]com/<package>@1.0.0/index.html). `index.html` renders a fake Cloudflare Turnstile "Just a moment..." challenge page with obfuscated inline JavaScript. After the Turnstile widget fires, the script fetches an encrypted value from `api.keyval.org` using an embedded encryption key, decrypts it client-side, and calls `window.location.replace()` to redirect the visitor. The redirect target is fully operator-controlled and can be changed at any time without modifying the npm package. **Dead-drop service:** `api.keyval.org` **Observed encryption keys:** - `PpihAtpV1i29jeS3Skk7XU74X2Zkd5wyzF2DOzY77k1Fz7G` - `NvGafkxVGs+z6VOGy6E43n+JQgKSUsn+S5NjXlBmcq4=` **Current resolved destination:** `chat.openai.com` — benign at time of analysis; not a reliable IOC given the dead-drop architecture.