Skip to content
archivesupply chain · 18 Sep 2026 · 10:40 UTC

WeaselBiscuit Stealer Spreads via 13 npm Packages to Harvest Chrome Extension Storage

last 60 dispatches · spectrum

Cybersecurity researchers have discovered a cluster of 13 npm packages that have been found to deliver a previously undocumented JavaScript stealer codenamed WeaselBiscuit. …

grounded ✓primary source ↗
Early access

Get the next one first.

Early access opens the actor API and MCP server first, plus alerts when an adversary you follow lands on the wire. One email when it's ready. Nothing else, ever.

bot-protected