Contents may be malicious. [Research Saturday]

Adam Meyers of CrowdStrike discusses Phantom Raven, a malicious information stealer apparently generated with an LLM and distributed through typo-squatted npm packages. The episode shows how attackers can abuse bug bounty programs and CI/CD pipelines, making package controls, allowlists, and deployment delays important for CIOs and security leaders.

Key points

• Phantom Raven is delivered through malicious npm packages and remote dynamic dependencies, not obviously malicious package code.
• The actor appears to steal environment data, then use compromised-device details to claim bug bounty payouts.
• CrowdStrike saw LLM hallmarks: verbose comments, better error handling, and token-pattern analysis suggesting AI-generated code.
• Collected data includes OS, hostname, IPs, Node.js version, command-line args, usernames, and CI/CD build variables.
• Recommended defenses include package allowlists, a deployment cool-off period, and stronger CI/CD policy checks across ecosystems.
• Supply-chain abuse is growing; CrowdStrike cited a case where attackers infected over 300 repositories in one day.