CrowdStrike Links LLM-Written PhantomRaven npm Stealer to Bug Bounty Abuse

CrowdStrike says a financially motivated bug bounty hunter likely used a large language model to create PhantomRaven, a JavaScript information stealer distributed through malicious npm packages. The case is notable because the malware itself was simple, but the workflow tied AI-assisted tooling, open-source package abuse and legitimate disclosure programs into one campaign.