Ten malicious packages mimicking legitimate software projects in the npm registry download an information-stealing component ...
An active campaign named 'PhantomRaven' is targeting developers with dozens of malicious npm packages that steal authentication tokens, CI/CD secrets, and GitHub credentials.
Some results have been hidden because they may be inaccessible to you
Show inaccessible results
Feedback