Researchers have discovered a cluster of 13 malicious npm packages distributing a previously undocumented JavaScript stealer called WeaselBiscuit. The malware is designed to harvest Chrome extension storage data and shows functional overlaps with campaigns linked to North Korean threat actors.
READ THE ORIGINAL ARTICLE AT THEHACKERNEWS.COM →