Malwarebytes Follow Attackers adopt JavaScript runtime Bun to spread NWHStealer A legitimate developer tool is being repurposed by attackers to package and spread this Windows infostealer in harder-to-detect ways. https://www.malwarebytes.com/blog/threat-intel/2026/05/attackers-adopt-javascript-runtime-bun-to-spread-nwhstealer malwarebytes.com
