unpkg is a CDN that serves files from npm packages as public web content. Instead of downloading a package from the registry and building it locally, a browser or script can fetch the published files directly from the mirror. That makes unpkg useful for quick access to JavaScript libraries, demos, and static assets.
In cyber security, that convenience can also be abused. Attackers can place HTML, scripts, or lure pages inside published package contents and use unpkg to host them with a trusted-looking domain and fast delivery. This is useful for phishing, fake verification pages, and other social-engineering flows because the content appears to come from developer infrastructure. Defenders should treat unexpected pages served from package mirrors as untrusted, inspect redirects and file types, and remember that a trusted CDN does not guarantee trusted content.