⤷ Title: PhantomRaven Attack: New Malware Steals CI/CD Secrets via AI Slopsquatting on npm
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 31 Oct 2025 03:06:02 +0000
════════════════════════
⌗ Tags: #Malware #CI/CD #Credentials #Generative AI #npm #PhantomRaven #security #Slopsquatting #Supply Chain
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 31 Oct 2025 03:06:02 +0000
════════════════════════
⌗ Tags: #Malware #CI/CD #Credentials #Generative AI #npm #PhantomRaven #security #Slopsquatting #Supply Chain
Penetration Testing Tools
PhantomRaven Attack: New Malware Steals CI/CD Secrets via AI Slopsquatting on npm
New PhantomRaven npm malware uses AI "slopsquatting" and invisible dynamic dependencies to steal GitHub, GitLab, and CI/CD tokens. Update vigilance now.
⤷ Title: PhantomRaven: 126 Malicious npm Packages Steal Developer Tokens and Secrets Using Hidden Dependencies
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 31 Oct 2025 00:30:49 +0000
════════════════════════
⌗ Tags: #Malware #CI/CD Secrets #Credential Theft #npm #PhantomRaven #Remote Dynamic Dependency #Slopsquatting #supply chain attack
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 31 Oct 2025 00:30:49 +0000
════════════════════════
⌗ Tags: #Malware #CI/CD Secrets #Credential Theft #npm #PhantomRaven #Remote Dynamic Dependency #Slopsquatting #supply chain attack
Daily CyberSecurity
PhantomRaven: 126 Malicious npm Packages Steal Developer Tokens and Secrets Using Hidden Dependencies
Koi Security exposed PhantomRaven, an npm supply chain attack using 126 packages. It leverages Remote Dynamic Dependencies (RDD) and AI slopsquatting to steal GitHub/CI/CD secrets from 86,000+ downloads.