Malicious NPM Packages Disguised With ‘Invisible’ Dependencies

In the PhantomRaven campaign, threat actors published 126 malicious npm packages that have flown under the radar, while collecting 86,000 downloads.

First seen on darkreading.com

Jump to article: www.darkreading.com/application-security/malicious-npm-packages-invisible-dependencies