PhantomRaven
Named by 2 kept items in this workspace.
Search every workspace for PhantomRaven. It matches the name as written, so it can find other things that share it.
The items that name it 2
Campaign using Remote Dynamic Dependencies (RDD) technique; published 200+ npm packages referencing attacker-controlled HTTPS-hosted tarballs as dependencies
APT designation attributed to Darshan/JPD by a researcher (referred to as Coy); disputed by Paul McCarty and peers as not actually an APT
All threat actors in this workspace.