Your screen stalls and a warning flashes. In the split second before the headline loads, the door to the site snaps shut.

The npm packages were available since July, have elaborately obfuscated malicious routines, and rely on a fake CAPTCHA to ...

A pop-up stops you, your screen stalls, and a warning hints you look like a script. You just wanted today’s headlines.