PhantomRaven Attack Exploits NPM’s Unchecked HTTP URL Dependency Feature October 30, 2025 by Maya Posch 14 Comments