Threat actors are exploiting vacant homes as "drop addresses" to intercept mail and enable fraud. Flare shows how postal services and fake identities are abused to turn mail into a fraud vector.

Attackers stole a long-lived npm token from the lead axios maintainer and published two poisoned versions that drop a ...