Oct 312025 PhantomRaven Malware Found in 126 npm Packages Stealing GitHub Tokens From Devs Researchers uncover PhantomRaven, a 126-package npm attack stealing GitHub tokens via remote dependencies.