‼️third-party[.]com is now serving Windows users a ClickFix lure disguised as a Cloudflare check.
The domain is referenced as a placeholder across 1,700+ repositories. The lure copies a PowerShell command to the clipboard, while non-Windows visitors see a decoy.
🔗 here’s how it works →