> PhantomRaven attack floods npm with credential-stealing packages
[AUTHOR: Bill Toulas]
[DATE: 29/10/2025 16:26]
[LANGUAGE: EN]
An active campaign named 'PhantomRaven' is targeting developers with dozens of malicious npm packages that steal authentication tokens, CI/CD secrets, and GitHub credentials. [...]