security Source: The Hacker News
๐Ÿ“… 18 September 2026 at 04:30 PM UTC

WeaselBiscuit Stealer Spreads via 13 npm Packages to Harvest Chrome Extension Storage

Verified Primary Feed Ingestion
โšก Executive Takeaways & Intelligence Summary
Cybersecurity researchers have discovered a cluster of 13 npm packages that have been found to deliver a previously undocumented JavaScript stealer codenamed WeaselBiscuit. The new malware family, per OpenSourceMalware, exhibits functional overlaps with two malware strains associated with the Democratic People's Republic of Korea's (DPRK) Contagious Interview campaign: BeaverTail and

๐Ÿ“ฐ Related Surveillance Disclosures