Contents may be malicious.

PhantomRaven is an LLM-generated JavaScript information stealer distributed via malicious npm packages by a financially motivated actor posing as a bug bounty hunter; it harvests system information and CI/CD environment variables (likely credentials). The research highlights how AI lowers the barrier to creating such malware and recommends mitigations including restricting install scripts, using private registries, and monitoring dependencies.