https://www.aikido.dev/blog/npm-supply-chain-phishing-campaigns
A targeted spear-phishing campaign used npm packages and jsDelivr as free phishing infrastructure, serving custom credential harvesters per victim
npm packagesgoneservingcustomcredential
https://developers.cloudflare.com/pages/configuration/serving-pages/
Cloudflare Pages includes a number of defaults for serving your Pages sites. This page details some of those decisions, so you can understand how Pages works,...
serving pagescloudflare docs