Security News PhantomRaven Malware Found in 126 npm Packages Stealing GitHub Tokens From Devs TheHackerNews Daniel Bender 30 Oct 2025 Researchers uncover PhantomRaven, a 126-package npm attack stealing GitHub tokens via remote dependencies.