npm

npm: 13 malicious packages found delivering WeaselBiscuit stealer

Researchers discovered 13 npm packages distributing a previously undocumented JavaScript stealer called WeaselBiscuit that harvests Chrome extension storage. The malware reportedly shares functionality with BeaverTail and other strains linked to North Korea's Contagious Interview campaign.