Malicious Npm Packages Abuse Adspect Cloaking in Crypto Scam

Researchers discovered seven malicious npm packages that execute browser-side malware to fingerprint visitors and, via the Adspect cloaking service and a proxy, selectively show fake CAPTCHAs then redirect non-researcher victims to cryptocurrency scam websites; the packages have been removed from npm, and analysts provided package names, proxy/Adspect endpoint indicators, and recommended detection strings.