PhantomRaven Malware Found in 126 npm Packages Stealing GitHub Tokens From Devs

A sophisticated supply chain attack campaign called PhantomRaven has compromised 126 npm packages with over 86,000 installs. The malware steals GitHub tokens, CI/CD secrets, and authentication credentials by hiding malicious code in remote dependencies fetched from attacker-controlled servers. The attack exploits npm's Show more