New PhantomRaven NPM attack wave steals dev data via 88 packages New attack waves from the 'PhantomRaven' supply-chain campaign are hitting the npm registry, with dozens of malicious packages that exfiltrate sensitive data from JavaScript developers.

New #PhantomRaven #NPM attack wave steals dev data via 88 packages

www.bleepingcomputer.com/news/security/new-phanto...

#cybersecurity

malicious_packages.csv GitHub Gist: instantly share code, notes, and snippets.

🚨 #PhantomRaven update

The Checkmarx Zero research team identified additional malicious npm packages linked to the latest wave of the campaign.

We’re sharing an updated package list (includes previously reported + newly discovered).
📦

The Return of PhantomRaven: Detecting Three New Waves of npm Supply Chain Attacks | Blog | Endor Labs Endor Labs security researchers identified 88 malicious open source packages belonging to three new waves of the PhantomRaven campaign.

#PhantomRaven is back 👻🐦‍⬛ We found 3 new waves distributing 88 #maliciouspackages (81 still live on npm). Packages look clean, but a hidden URL in package.json pulls credential-stealing malware.
www.endorlabs.com/learn/return...

Seen the news about #PhantomRaven, the NPM malware campaign? Good news: Our Malicious Package Identification API already identifies relevant packages as malicious (see image for one example), and our Malicious Package Protection component has been flagging them during SCA scans. 🧵1/2

Alert: Over 100 malicious npm packages in the PhantomRaven campaign are stealing GitHub tokens and CI/CD secrets. Developers, stay vigilant! #CyberSecurity #npm #PhantomRaven #DevSecOps Link: thedailytechfeed.com/phantomraven...

Alert: PhantomRaven attack deploys 126 malicious npm packages, compromising developer credentials. Over 86,000 downloads recorded. Stay vigilant! #CyberSecurity #npm #PhantomRaven #SupplyChainAttack Link: thedailytechfeed.com/phantomraven...

ITちゃんねる 「AIの出力をコピペする開発者」を狙って悪意あるnpmパッケージをインストールさせて情報を盗み取る攻撃手法「PhantomRaven」の存在が判明 #AIの出力をコピペする開発者 #PhantomRaven #ITニュース

「AIの出力をコピペする開発者」を狙って悪意あるnpmパッケージをインストールさせて情報を盗み取る攻撃手法「PhantomRaven」の存在が判明
#AIの出力をコピペする開発者 #PhantomRaven #ITニュース

PhantomRaven sfrutta dipendenze invisibili su NPM per rubare credenziali e segreti CI/CD, eludendo controlli statici e ingannando l’AI.

#furtocredenziali #npm #PhantomRaven #RDD
www.matricedigitale.it/2025/10/30/p...

📰 Serangan PhantomRaven Banjiri NPM dengan Paket Berbahaya Pencuri Kredensial

👉 Baca artikel lengkap di sini: ahmandonk.com/2025/10/30/phantomraven-...

#ai #security #cybersecurity #github #gitlab #malware #node.js #npm #phantomraven #supply #chain #attack

NPM flooded with malicious packages downloaded more than 86,000 times https://arstechni.ca #codedependencies #coderepositories #phantomraven #Security #Biz&IT #npm