WeaselBiscuit Stealer Spreads via 13 npm Packages to Harvest Chrome Extension Storage

Cybersecurity researchers have identified 13 npm packages that are distributing a newly discovered JavaScript stealer called WeaselBiscuit. This malware is designed to harvest Chrome extension storage. WeaselBiscuit shares similarities with two other malware strains, BeaverTail, which are linked to the Contagious Interview campaign attributed to the Democratic People's Republic of Korea. The discovery highlights a new threat to users who may be exposed to the malicious npm packages. The WeaselBiscuit stealer is a previously undocumented malware family. Its functionality overlaps with known malware associated with the DPRK.