PhantomRaven Campaign Uses 88 Malicious npm Packages to Steal Developer Secrets

Researchers reported a renewed PhantomRaven software supply chain campaign on the npm registry involving 88 malicious packages masquerading as trusted JavaScript ecosystem projects, including packages themed around Babel and GraphQL Codegen. The packages were published across three waves from late 2025 into early 2026 and were designed to automatically fetch and run malware after installation, targeting developers and build environments rather than end users. The activity is not fluff: it is a substantive threat intelligence and malware distribution story involving active credential theft through open-source package abuse.

The malware exfiltrates sensitive data from developer systems and CI/CD environments, including emails and configuration data from .npmrc, .gitconfig, and environment variables, as well as tokens for GitHub, GitLab, CircleCI, and Jenkins. Reporting indicates PhantomRaven has kept core infrastructure and payload behavior broadly consistent since earlier activity, while adapting operational details by rotating npm and email accounts, changing package metadata and PHP endpoints, and increasing the pace of malicious package publication. Most of the packages were reportedly still available for download at the time of reporting, underscoring continued exposure for organizations that rely on npm-based development workflows.