Reported by 2 outlets
WeaselBiscuit npm stealer targets Chrome extension storage, linked to DPRK Contagious
hot0.0
Why this score
- Breadth
- 1.00 / 2.0 · 2 sources
- Authority
- 1.80 / 2.0 · best outlet weight
- Severity
- 0.50 / 5.0 · CVSS + content signals
- Velocity
- 0.00 / 2.0 · updates in 48h
- Pickup speed
- 0.14 / 0.6 · time to second source
- Recency
- × 0.00 temporal multiplier
- Community
- + 0.00 / 1.5 · reddit signal
- Score
- 0.0 / 10 = base × recency + community
Timeline
-
original reporting
🤖 New JS stealer "WeaselBiscuit" found in 13 npm packages, harvesting Chrome extension storage. Linked to BeaverTail and the DPRK Contagious
thehackernews.com · 25d ago · September 18th, 2026
🤖 New JS stealer "WeaselBiscuit" found in 13 npm packages, harvesting Chrome extension storage. Linked to BeaverTail and the DPRK Contagious
via Mastodon https://thehackernews.com/2026/09/weaselbiscuit-stealer-spreads-via-13.html
-
update from cyberworldops.eu
13 npm packages were found delivering WeaselBiscuit, a compact JavaScript stealer focused on Chrome extension storage exfiltration. It share
cyberworldops.eu · 24d ago · September 20th, 2026
13 npm packages were found delivering WeaselBiscuit, a compact JavaScript stealer focused on Chrome extension storage exfiltration. It share
via Mastodon https://cyberworldops.eu/en/weaselbiscuit-turns-npm-imports-into-a-chrome-extension-data-theft