סיטי ניוז

PhantomRaven attack floods npm with credential-stealing packages

29/10/2025-18:26 29/10/2025-18:35 מחשבים וטכנולוגיה BleepingComputer דיווח

PhantomRaven attack floods npm with credential-stealing packages
An active campaign named 'PhantomRaven' is targeting developers with dozens of malicious npm packages that steal authentication tokens, CI/CD secrets, and GitHub credentials. [...]