> PhantomRaven: npm Malware Evolves Again
[AUTHOR: Sonatype Security Research Team]
[DATE: 31/10/2025 19:27]
[LANGUAGE: EN]
Published 3:00 p.m. ET on October 31, 2025; last updated 5:00 p.m. ET on October 31, 2025
This week, an open source malware campaign dubbed ‘PhantomRaven’ has run rampant, flooding the npm registry with over a hundred malicious packages that saw more than 86,000 potential victims before discovery.
The post PhantomRaven: npm Malware Evolves Again appeared first on Security Boulevard.