WeaselBiscuit Stealer Spreads via 13 npm Packages to Harvest Chrome Extension Storage
Medium · The Hacker News ·
What happened
13 npm packages deliver WeaselBiscuit, a JS stealer harvesting Chrome extension storage data; linked to DPRK's Contagious Interview campaign. Developers installing them are at risk.
What to do now
Remove the 13 flagged npm packages, rotate all credentials and browser/extension tokens, audit lockfiles and CI logs for install/execution, block untrusted registries, and check the OpenSourceMalware advisory for the package list.
Original source
AI-assisted analysis, sources cited. Verify with the vendor advisory before acting.