WeaselBiscuit Stealer Spreads via 13 npm Packages to Harvest Chrome Extension Storage
Moyen · The Hacker News ·
Ce qui s'est passé
13 npm packages deliver WeaselBiscuit, a JS stealer harvesting Chrome extension storage data; linked to DPRK's Contagious Interview campaign. Developers installing them are at risk.
À faire maintenant
Remove the 13 flagged npm packages, rotate all credentials and browser/extension tokens, audit lockfiles and CI logs for install/execution, block untrusted registries, and check the OpenSourceMalware advisory for the package list.
Source originale
Analyse assistée par IA, sources citées. Vérifiez auprès de l'avis du fournisseur avant d'agir.