Post B6lZQMHJx38S1BE2WO by thomrstrom@triangletoot.party
 (DIR) More posts by thomrstrom@triangletoot.party
 (DIR) Post #B6lZQMHJx38S1BE2WO by thomrstrom@triangletoot.party
       0 likes, 0 repeats
       
       Today's fun discovery is the clx-cookieparser NPM; which via a dependency, fetches a blob from jsonkeeper.com and evals it, and the chain unrolls into BeaverTail and InvisibleFerret — the loader-and-stealer kit of the DPRK's Contagious Interview campaign: https://atomdrift.org/discoveries/2026/05/clx-cookieparser-dependency-twin-beavertail/