Claimed Bug Bounty Hunter Likely Used LLM to Build PhantomRaven npm Stealer

A financially motivated threat actor is linked to PhantomRaven, a JavaScript information stealer distributed via npm. Researchers assess with high confidence that the developer used a large language model to write the malware, based on verbose comments, placeholder code, and statistical token-analysis patterns. The stealer targets sensitive data from compromised systems.