[weaselbiscuit]

September 19, 2026

• WeaselBiscuit stealer shipped in 13 npm packages, specifically harvesting Chrome extension storage — i.e. wallet and session material held by extensions rather than just browser profiles (The Hacker News). · Supply Chain & Malicious Packages

in From a Help Forum to OpenAI's Monorepo in 72 Hours