Skip to content
WeaselBiscuit Stealer Spreads via 13 npm Packages to Harvest Chrome Extension Storage

WeaselBiscuit Stealer Spreads via 13 npm Packages to Harvest Chrome Extension Storage

Ravie LakshmananSep 18, 2026Malware / Web Security Cybersecurity researchers have discovered a cluster of 13 npm packages that have been found to deliver a previously undocumented JavaScript stealer codenamed WeaselBiscuit. The new malware family, per… 

Claimed Bug Bounty Hunter Likely Used LLM to Build PhantomRaven npm Stealer

Claimed Bug Bounty Hunter Likely Used LLM to Build PhantomRaven npm Stealer

Ravie LakshmananSep 18, 2026Malware / Cybercrime A financially motivated threat actor has been linked to the development and distribution of a JavaScript (JS)-based information stealer known as PhantomRaven via the npm package registry. “The developer…