WeaselBiscuit Strips BeaverTail and OtterCookie Down to Essentials

Reported 18 Sep 2026 by otx · Severity: medium

A new JavaScript infostealer dubbed WeaselBiscuit has been discovered hidden in 11 malicious npm packages. This lean malware shares operational similarities with DPRK-linked BeaverTail and OtterCookie families but features a stripped-down architecture. WeaselBiscuit deploys throu