Malicious code in jira-ticket-todo-comment (npm)
This malicious package was published during the PhantomRaven NPM campaign. The malicious payload steals tokens and credentials.
Advisories for Npm/Jira-Ticket-Todo-Comment package
2025
This malicious package was published during the PhantomRaven NPM campaign. The malicious payload steals tokens and credentials.