Published 3:00 p.m. ET on October 31, 2025; last updated 5:00 p.m. ET on October 31, 2025 This week, an open source malware campaign dubbed ‘PhantomRaven’ has run rampant, flooding the npm registry with over a hundred malicious packages that saw more than 86,000 potential victims before discovery.
First seen on securityboulevard.com
Jump to article: securityboulevard.com/2025/10/phantomraven-npm-malware-evolves-again/
![]()

