Worked on the ossf/malicious-packages repository to address a security incident involving the PhantomRaven campaign, which exploited Remote Dynamic Dependencies to introduce 88 malicious npm packages. Focused on malware analysis and npm package management, the work involved updating threat intelligence feeds, restructuring OSV data layouts, and improving repository hygiene to enhance detection and remediation processes. Utilized JSON for data organization and collaborated with security and threat intelligence teams to ensure effective incident containment and documentation. These efforts reduced developer exposure risk and established scalable workflows for future incident response, emphasizing cross-team coordination and best practices for commit metadata and traceability.