WeaselBiscuit Stealer spreads via 13 npm packages

Researchers discovered 13 npm packages distributing a new JavaScript stealer called WeaselBiscuit. The malware steals data from Chrome extension storage and shares traits with BeaverTail malware from the North Korean Contagious Interview campaign.

• WeaselBiscuit stealer spreads via 13 npm packages
• Malware steals data from Chrome extension storage
• Code similar to BeaverTail from Contagious Interview (North Korea)