WeaselBiscuit Stealer Spreads via 13 npm Packages to Harvest Chrome Extension Storage
September 18, 2026
1 min read
3 views
cybersecurity
threats
news
Cybersecurity researchers have discovered a cluster of 13 npm packages that have been found to deliver a previously undocumented JavaScript stealer codenamed WeaselBiscuit.
The new malware family, per OpenSourceMalware, exhibits functional overlaps with two malware strains associated with the Democratic People's Republic of Korea's (DPRK) Contagious Interview campaign: BeaverTail and
Was this article helpful?
0 found this helpful