Claimed Bug Bounty Hunter Likely Used LLM to Build PhantomRaven npm Stealer

A threat actor motivated by financial gain is believed to be behind the creation and distribution of PhantomRaven, a JavaScript-based information stealer, through the npm package registry. The malware's developer likely utilized a large language model to write the code, as indicated by verbose comments, placeholder code, and specific statistical patterns. This assessment is made with high confidence, suggesting a strong likelihood of large language model involvement in the malware's development.