PhantomRaven’s Remote Dynamic Dependencies Redefine Supply Chain Threats
A sophisticated supply chain attack called PhantomRaven has compromised npm with 126 malicious packages using a novel technique called Remote Dynamic Dependencies. The attack has already recorded 86,000 downloads while evading conventional security detection methods by fetching malicious payloads on