Malware
WEEVILPROXY
aka JSCEAL
WEEVILPROXY is a sophisticated and featureful stealer which has a payload primarily written in NodeJS.
WEEVILPROXY, also known as JSCEAL, is a JavaScript malware family.
Background
WEEVILPROXY is an advanced, feature-rich stealer whose payload is mostly written in NodeJS. Its author invested significant effort into building out a wide range of capabilities, among them techniques the researchers say they had not seen in earlier campaigns. These newer TTPs include tampering with Windows Setup and Windows Recovery to achieve durable persistence, as well as patching browser extensions on the fly.
Source: Malpedia (Fraunhofer FKIE).