OpenSourceMalware

Mentions · 7d0
Mentions · 30d0
All mentions2
First seenAug 11, 2026
Last mentionedSep 18, 2026

Timeline

2 articles · newest first

WeaselBiscuit Stealer Spreads via 13 npm Packages to Harvest Chrome Extension Storage

Researchers discovered WeaselBiscuit, a stripped-down JavaScript stealer delivered via 13 malicious npm packages, harvesting Chrome extension storage with suspected DPRK links.

The Hacker NewsSep 18, 10:40 UTC · Sep 18, 2026MalwareExploited2

Nearly 800 Malicious npm Packages Deliver Cross

Nearly 800 typo-squatted npm packages deliver WEL1DROPPER, a cross-platform downloader installing RAT and infostealer payloads on Windows, macOS, Linux.

The Hacker NewsAug 11, 14:37 UTC · Aug 11, 2026MalwareExploited2

Appears with

ETWproduct · 1
Sonatypevendor · 1
AMSIproduct · 1
npmvendor · 1
WeaselBiscuitmalware · 1
Slivermalware · 1
Palo Alto Networks Unit 42vendor · 1
DPRK Contagious Interviewthreat actor · 1
Cloudflare Workersproduct · 1
OtterCookiemalware · 1
BeaverTailmalware · 1
OpenSourceMalwareorganization · 1
npmproduct · 1
WEL1DROPPERmalware · 1

Entities are extracted by the model from each article. First seen Aug 11, 2026, last mentioned Sep 18, 2026. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.