More than 86,000 downloads of malicious packages on NPM

info@teralevel.com (TeraLevel) — Thu, 30 Oct 2025 18:00:00 +0000

Critical Vulnerability: The Dark Side of Code Dependencies

The modern development ecosystem, built on the use of repositories like NPM (Node Package Manager), relies on trust and efficiency. However, a recent report from the security firm Koi has sounded the alarm, revealing a massive cyberattack campaign, tracked as PhantomRaven, that has successfully compromised over 126 malicious packages. These packages have been downloaded more than 86,000 times since August, largely flying under the radar.

RDD on TeraLevel

More than 86,000 downloads of malicious packages on NPM

Critical Vulnerability: The Dark Side of Code Dependencies