CYBER● ELEVATEDSep 18 · Sep 18, 2026, 10:40 AM
WeaselBiscuit Stealer Spreads via 13 npm Packages to Harvest Chrome Extension Storage
The Hacker News · global
Cybersecurity researchers have discovered a cluster of 13 npm packages that have been found to deliver a previously undocumented JavaScript stealer codenamed WeaselBiscuit. The new malware family, per OpenSourceMalware, exhibits functional overlaps with two malware strains associated with the Democratic People's Republic of Korea's (DPRK) Contagious Interview campaign: BeaverTail and
GlobeAlert aggregates and classifies open sources; the story above belongs to its publisher. Summaries are machine-generated from the source text.
More in Cyber
CYBERnow[Virtual Event] Cybersecurity Outlook 2027Dark ReadingCYBERnow[Virtual Event] What Every Enterprise Should Know About Securing Cloud Assets in the Age of AIDark ReadingCYBER56m agoRussia and China are using AI to stage relentless cyberattacks against the UKNew ScientistCYBER1h ago‘Witch hunt’ sweeps up Asian men misidentified in alleged Cornell gang rapeSouth China Morning Post