Cybersecurity researchers have identified 13 npm packages distributing a new JavaScript information stealer, dubbed WeaselBiscuit. This malware exhibits functional overlaps with BeaverTail and BeaverTail, strains associated with North Korea’s Contagious Interview campaign. WeaselBiscuit is designed to harvest data from Chrome extension storage, posing a threat to developers and users of npm packages.