Mobile Security & Privacy Cybersecurity Researchers Discover "WeaselBiscuit" JavaScript Stealer Hiding in npm Packages September 18, 2026 Iffa Jayyana Cybersecurity researchers have uncovered a new cluster of 13 malicious npm packages designed to deliver a previously undocumented JavaScript information-stealing malware codenamed WeaselBiscuit. The discovery highlights the persistent threat of…