Home Today’s Briefing Deep Dives In Play Trending For You Discover My Stack Saved Off Radar Search

Loading today’s stories

Today

AI-assisted reporting, grounded in a per-article claim ledger. Perspective Coverage and Reality Strip separate source viewpoints from evidence, adoption, hype, incentives, and confidence.

Today

Front Page
Today’s Briefing
Newsletters
Trending
For You
Discover
My Stack
Saved
Off Radar
Search

Sections

Security
Build
Invest
Product
Leadership
Science

Company

About
Mission
How this is made
Evidence Index
The desks
The sources we read
Corrections
Press and brand
The daily edition

Trending now

AI Accelerators
Reward Hacking
Content Moderation
Humanoid Robots
Physical AI
EUV lithography
Platform Antitrust
Browser Extension Security
AI Coding Assistants
Digital sovereignty

How this is made

Today For You My Stack Off Radar Search

JSCeal — other — Clarity Today

other

JSCeal

Information-stealing malware family aimed at cryptocurrency users, distributed as compiled V8 bytecode and executed by a bundled Node.js runtime. Also tracked under the names WEEVILPROXY and MeadowLocust.

Known aliases

MeadowLocust
WEEVILPROXY

Relationships

No evidence-backed relationships are recorded.

Current clusters

security2 publishers

JSCeal drives the victim's own browser to take over their Google account

Check Point's deobfuscation of 23 compiled V8 bytecode samples shows JSCeal replaying stolen cookies inside the victim's own browser profile, then stuffing local credentials at any password prompt until it holds a fresh OAuth token.

Publishers:securityaffairs.com · thehackernews.com

Reality

Evidence70
Adoption58
Hype gap+12
Incentives68

Confidence64