WeaselBiscuit: New JavaScript Stealer Spreads via 13 npm Packages

Cybersecurity researchers have identified 13 malicious npm packages spreading WeaselBiscuit.

Published 2h1 sourceNotable

≈ 17sSpeed

The fact

This new JavaScript stealer targets Chrome extensions to exfiltrate sensitive data.

Its features resemble strains linked to the Democratic People's Republic of Korea.

Click the link to read an article on the topic:

Explore this topic

Auto-synthesis from 1 media source · identified on September 18, 2026