Cybersecurity researchers have discovered a new ‘Stealit’ info-stealing malware campaign that exploits an experimental Node.js feature.

JavaScript is a text-based programming language that's commonly used to make webpages more dynamic and interactive for visitors.

Fortinet warns Stealit malware uses Node.js SEA and fake installers to deliver stealers, RATs, and persistence.

Install the library with your package manager of choice, e.g.: One great use case for this is where you have an API that you want to be JSON compatible for all clients, but you still also want to ...