PhantomRaven Info-Stealer Discovered on npm Registry

Researchers uncovered a JavaScript-based information stealer dubbed PhantomRaven distributed through the npm package registry. Analysts assess with high confidence that the financially motivated threat actor used a large language model (LLM) to generate the malicious code, evidenced by verbose comments and structural patterns.