#npm

The WeaselBiscuit Threat: Anatomy of a Lightweight JavaScript Stealer in npm

Analysis of the WeaselBiscuit JavaScript stealer spreading via 13 npm packages to harvest sensitive Chrome extension data and developer credentials.