Diamond Member ThaHaka 0 Posted October 30, 2025 Diamond Member Share Posted October 30, 2025 This is the hidden content, please Sign In or Sign Up Cybersecurity researchers have uncovered yet another active software supply chain attack campaign targeting the npm registry with over 100 malicious packages that can steal authentication tokens, CI/CD secrets, and GitHub credentials from developers' machines. The campaign has been codenamed PhantomRaven by Koi Security. The activity is assessed to have begun in August 2025, when the first This is the hidden content, please Sign In or Sign Up 0 Quote Link to comment https://hopzone.eu/forums/topic/286169-h4ckn3wsphantomraven-malware-found-in-126-npm-packages-stealing-github-tokens-from-devs/ Share on other sites More sharing options...
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.