Threat Actor Exploits LLM to Craft PhantomRaven npm Stealer

A financially motivated threat actor used a large language model to craft PhantomRaven, a JavaScript information stealer whose code shows telltale signs of AI involvement including verbose comments and placeholder code, according to the report. The malware's LLM-assisted development marks a case of generative AI being used to build credential-stealing code.